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1. General Description 


The Realtek RTL8169S/RTL8110S-32 and RTL8169S/RTL8110S-64 LOM Ethernet controllers combine a triple-speed IEEE 
802.3 compliant media access controller (MAC) with a triple-speed Ethernet transceiver, 32(64*)-bit PCI bus controller, and 
embedded memory. With state-of-the-art DSP technology and mixed-mode signal technology, they offer high-speed 
transmission over CAT 5 UTP cable or CAT 3 UTP (10Mbps only) cable. Functions such as Crossover Detection & 
Auto-Correction, polarity correction, adaptive equalization, cross-talk cancellation, echo cancellation, timing recovery, and 
error correction are implemented to provide robust transmission and reception capability at high speeds. 


The devices support the PCI v2.2 bus interface for host communications with power management and are compliant with the 
IEEE 802.3 specification for 10/100Mbps Ethernet and the IEEE 802.3ab specification for 1000Mbps Ethernet. They also 
support an auxiliary power auto-detect function, and will auto-configure related bits of the PCI power management registers in 
PCI configuration space. 

They also support the Advanced Configuration Power management Interface (ACPI)--power management for modern 
operating systems that are capable of Operating System directed Power Management (OSPM)--to achieve the most efficient 
power management possible. 


In addition to the ACPI feature, the RTL8169S/RTL8110S-32 and RTL8169S/RTL8110S-64 support remote wake-up 
(including AMD Magic Packet, Re-LinkOk, and Microsoft® Wake-up frame) in both ACPI and APM (Advanced Power 
Management) environments. Also, the LWAKE pin provides four different output signals including active high, active low, 
positive pulse, and negative pulse. The versatility of the LWAKE pin provides motherboards with Wake-On-LAN (WOL) 
functionality. To support WOL from a deep power down state (e.g. D3cold, i.e. main power is off and only auxiliary exists), 
the auxiliary power source must be able to provide the needed power for the RTL8169S/RTL8110S-32 and 
RTL8169S/RTL8 1 10S-64. 


The RTL8169S/RTL8110S is fully compliant with Microsoft® NDIS5 (IP, TCP, UDP) Checksum and Segmentation 
Task-offload features, and supports IEEE 802.1Q Virtual bridged Local Area Network (VLAN). The above features contribute 
to lowering CPU utilization, especially benefiting performance when in operation as a server network card. Also, the devices 
boost their PCI performance by supporting PCI Memory Read Line & Memory Read Multiple when transmitting, and Memory 
Write and Invalidate when receiving. To better qualify as a server card, the RTL8169S/RTL8110S-32 and 
RTL8169S/RTL8110S-64 support the PCI Dual Address Cycle (DAC) command when the assigned buffers reside at a 
physical memory address higher than 4 Gigabytes. 


* 233-PIN TFBGA package only. 
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Features 


Integrated 10/100/1000 transceiver 
Auto-Negotiation with Next page capability 


Supports PCI 2.2, 32-bit/64-bit 
(RTL8169S/RTL8110S-64 only), 33/66MHz 


Supports pair swap/polarity/skew correction 
Crossover Detection & Auto-Correction 
Wake-on-LAN and remote wake-up support 


Microsoft® NDIS5 Checksum Offload (IP, TCP, UDP) 
and largesend offload support 


Supports Full Duplex flow control (IEEE 802.3x) 


System Applications 


Gigabit Ethernet on Motherboard — RTL8110S. 


ee ee ee ee a a) 


Fully compliant with IEEE 802.3, IEEE 802.3u, 
IEEE 802.3ab 


Supports IEEE 802.1Q VLAN tagging 

Serial EEPROM 

3.3V signaling, 5V PCI I/O tolerant 
Transmit/Receive FIFO (8K/64K) support 
Supports power down/link down power saving 
JTAG support 

128-pin QFP/233-pin TFBGA package 


Gigabit Ethernet Network Interface Cards/Workstation Cards — RTL8169S 
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4. Pin Assignments 


4.1. RTL8169S-32 128-Pin QFP Pin Assignments 


20 AVDDL 19 MDI3- 
21 VSSPST 18 MDI3+ 
22 GND 7 VSS 
23 ISOLATEB 16 AVDDL 
24 VDDI8 I5 MDI2- 
25 INTAB iC MDI2+ 
26 VDD33 13 Vss 
28 PCICLK i NC 
30 REQB ‘) VSS 
31 PMEB 8 CTRL25 
32 VDDI8 7 AVDDL 
6 MDII- 
34 PCIAD30 5 MDI1+ 
35 GND q VSS 
36S PCIAD29.— ee See: \'2>)>) 5 
37s PCIAD28 2 MDI0- 
38 VSSPST 1 MDIO+ 
39 PCIAD27 128 VSS 
40 PCTAD26 -—~ TIT RSET 
42 PCTAD25 125 CTRL18 
52ND RTL8169S-32 tor 
57 PCIADI8 110s VDD18 
62 GND 105 LANWAKE 
65 NC 102 PCIAD2 
67. TRDYB 100 GND 
69 STOPB 98 PCTAD3 
70 PERRB 97 PCIAD4 
TI VDD33 96 PCTADS 
72 NC 95 PCTAD6 
73 GND 94 VDD33 
es Ne 93 PCTAD7 
92 CBEBO 
76 PAR 91 VSSPST 
77 CBEBI 90 PCIAD8 
78 VDDI8 89 PCIAD9 
79 PCTAD15 88 M66EN 
80 GND 87 PCIAD10 
81 VSSPST 86 PCIAD11 
82 PCIADI4 85 PCIAD12 
83 PCIAD13 EL VDD33 


Figure 1. RTL8169S-32 128-Pin QFP Pin Assignments 
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4.2. RTL&8169S-64 233-Pin TF BGA Pin Assignments 
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Figure 2. RTL8169S-64 233-Pin TFBGA Pin Assignments 
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4.3. RTL8110S-32 128-Pin QFP Pin Assignments 

20 AVDDL 19 MDI3- 
21 VSSPST 18 MDI3+ 
22 GND 17 VSS 
23 ISOLATEB 16 AVDDL 
24 VDD18 5 MDI2- 
25 INTAB 4 MDI2+ 
26 VDD33 13 VSS 
28 PCICLK 5 NC 
30 REQB 9 VSS 
31 PMEB 8 CTRL25 
32 VDD18 7 AVDDL 

6 MDII- 
34 PCIAD30 5 MDI1+ 
35 GND q vss 
36. PCIAD2Z9— ee See: \'2>)>) 5 
37s PCIAD28 2 MDI0- 
38. —SCVSSPST j 1S MDIO+ 
39 PCIAD27 128 VSS 
42 PCIAD25 125 CTRL18 
37 — tN RTL8110S-32 te 
57 PCIADI8 110 VDD18 
62 GND 105 LANWAKE 
64 VDDIS | [103 PCTAD! 
65 CLKRUNB 102 PCIAD2 
67 TRDYB 100 GND 
69 STOPB 3 
70 PERRB 97 PCIAD4 
TI VDD33 96 PCIADS 
72 NC 95 PCTAD6 
73 GND 94 VDD33 
is — Ware o7 —t BEBO 

92 CBEBO 
76 PAR 91 VSSPST 
TT CBEBI 90 PCIADS8 
78 VDDI8 89 PCTAD9 
79 PCTAD15 88 M66EN 
80 GND 87 PCTAD 10 
8I VSSPST 86 PCTAD11 
82 PCIADI4 85 PCIAD12 
83 PCTADI3 EL VDD33 

Figure 3. RTL8110S-32 128-Pin QFP Pin Assignments 
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4.4. RTLS110S-64 233-Pin TF BGA Pin Assignments 
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5. Pin Descriptions 


The following signal type codes are used in the tables: 
I: Input. 

O: Output 

T/S: Tri-State bi-directional input/output pin. 

S/T/S: Sustained Tri-State. 

O/D: Open Drain. 


5.1. Power Management/Isolation 


Table 1. Power Management/Isolation 
Symbol Type | Pin No Pin No Description 
(128QFP) | (233BGA) 

PMEB O/D 31 P3 Power Management Event: Open drain, active low. 

(PME#) Used to request a change in the current power management state 
and/or to indicate that a power management event has occurred. 

ISOLATEB I 23 Jl Isolate Pin: Active low. 

(ISOLATE#) Used to isolate the RTL8169S/RTL8110S from the PCI bus. The 
RTL8169S/RTL8110S will not drive its PCI outputs (excluding 
PME#) and will not sample its PCI input (including PCIRSTB 
and PCICLK) as long as the Isolate pin is asserted. 

LANWAKE O 105 Al3 LAN WAKE-UP Signal (When CardB_En=0, bit2 Config3): 


This signal is used to inform the motherboard to execute the 
wake-up process. The motherboard must support Wake-On-LAN 
(WOL). There are 4 choices of output that may be asserted from 
the LANWAKE pin (active high, active low, positive pulse, and 
negative pulse). We can configure the LANWAKE output via two 
CONFIG bits: LWACT(Config!.4) and LWPTN(Config4.2). 


LWAKE Output LWACT 
0 1 
LWPTN 0 Active high Active low 
1 Positive pulse Negative pulse 


The default output is an active high signal. Once a PME event is 
received, the LANWAKE and PMEB assert at the same time 
when the LWPME (bit4, CONFIGA4) is set to 0. If the LWPME is 
set to 1, the LANWAKE asserts only when the PMEB asserts and 
ISOLATEB is low. 
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5.2. PCI Interface 


Table 2. PCI Interface 
Symbol Type Pin No. Pin No. Description 
(128QFP) | (233BGA) 
PCIADPIN63-32 T/S T3, R4, U4, | AD63-32: High 32-bit PCI address and data 
T5, T6, U7, | multiplexed pins. 
U8, U9, UI1,) Address and Data are multiplexed on the same pins and 
U12, U13, | provide 32 additional bits. During an address phase (when 
U15, T14, using the DAC command and when REQ64B is asserted), 
R12, R15, | the upper 32-bits of a 64-bit address are transferred; 
U16, U17, | otherwise, these bits are reserved but are stable and 
R17, P16, | undetermined. During a data phase, an additional 32-bits 
N16, M17, | of data are transferred when a 64-bit transaction has been 
M15, K17, | negotiated by the assertion of REQ64B and ACK64B. 
J16, H17, 
G17, G15, 
F16, E16, 
D17, C17, 
B17 
PCIADPIN31-0 T/S 33, 34, 36, | T1, T2, U2, | AD31-0: Low 32-bit PCI address and data multiplexed 
37, 39, 40, | R3, T4, U3, | pins. The address phase is the first clock cycle in which 
42, 43, 47, | R5, U5, T7, | FRAMEB is asserted. During the address phase, AD31-0 
49, 50, 53, |T8,T9, T10, | contains a physical address (32 bits). For I/O, this is a byte 
55, 57, 58, T11, R9, address, and for configuration and memory, it is a 
59, 79, 82, T12, U14, | double-word address. The RTL8169S/RTL8110S supports 
83, 85, 86, | L16,K16, | both big-endian and little-endian byte ordering. Write data 
87, 89, 90, J17,J15, is stable and valid when IRDYB is asserted. Read data is 
93, 95, 96, | H16,G16, | stable and valid when TRDYB is asserted. Data I is 
97, 98, 102, | E17, E15, | transferred during those clocks where both IRDYB and 
103, 104 C16, A17, | TRDYB are asserted. 
B16, D15, 
Al5, C14, 
B13, C12 
CBEBPIN7-4 T/S M2, M3, N1,| PCI bus command and byte enables multiplexed pins. 
RI During the address phase of a transaction, CBEBPIN7-4 
define the bus command. During the data phase, 
CBEBPIN7-4 are used as Byte Enables. The Byte Enables 
are valid for the entire data phase and determine which 
byte lanes carry meaningful data. CBEBPIN4 applies to 
byte 4, and CBEBPIN7 applies to byte 7. 
CBEBPIN3-0 T/S 44, 60, 77, R6, T13, PCI bus command and byte enables multiplexed pins. 
92 L17,D16 | During the address phase of a transaction, CBEBPIN3-0 
define the bus command. During the data phase, 
CBEBPIN3-0 are used as Byte Enables. The Byte Enables 
are valid for the entire data phase and determine which 
byte lanes carry meaningful data. CBEBPINO applies to 
byte 0, and CBEBPIN3 applies to byte 3. 
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Symbol Type Pin No. Pin No. Description 
(128QFP) | (233BGA) 
PCICLK I 28 M1 PCI clock: This clock input provides timing for all PCI 
transactions and is input to the PCI device. Supports up to 
a 66MHz PCI clock. 
CLKRUNB vO 65 TIS Clock Run: This signal is used by the RTL8110S to 


request starting (or speeding up) of the PCICLK clock. 
CLKRUNB also indicates the clock status. For the 
RTL8110S, CLKRUNB is an open drain output as well as 
an input. The RTL8110S requests the central resource to 
start, speed up, or maintain the interface clock by the 
assertion of CLKRUNB. For the host system, it is an 
S/T/S signal. The host system (central resource) is 
responsible for maintaining CLKRUNB asserted, and for 
driving it high to the negated (deasserted) state. 

For RTL8169S-32/64, this pin is NC pin. 

DEVSELB S/T/S 68 T16 Device Select: As a bus master, the RTL8169S/RTL8110S 
samples this signal to insure that a PCI target recognizes 
the destination address for the data transfer. As a target, 
the RTL8169S/RTL8110S asserts this signal low when it 
recognizes its target address after FRAMEB is asserted. 
FRAMEB S/T/S 61 R13 Cycle Frame: As a bus master, this pin indicates the 
beginning and duration of an access. FRAMEB is asserted 
low to indicate the start of a bus transaction. While 
FRAMEB is asserted, data transfer continues. When 
FRAMEB is de-asserted, the transaction is in the final 
data phase. 

As a target, the device monitors this signal before 
decoding the address to check if the current transaction is 
addressed to it. 

GNTB I 29 N2 Grant: This signal is asserted low to indicate to the 
RTL8169S/RTL8110S that the central arbiter has granted 
the ownership of the bus to the RTL8169S/RTL81108S. 
This input is used when the device is acting as a bus 


master. 

REQB T/S 30 P2 Request: The RTL8169S/RTL8110S will assert this signal 
low to request the ownership of the bus from the central 
arbiter. 

IDSEL I 46 U6 Initialization Device Select: This pin allows the device to 


identify when configuration read/write transactions are 
intended for it. 

INTAB O/D 25 K3 Interrupt A: Used to request an interrupt. It is asserted 
low when an interrupt condition occurs, as defined by the 
Interrupt Status, Interrupt Mask. 
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Symbol Type Pin No. Pin No. Description 
(128QFP) | (233BGA) 
IRDYB S/T/S 63 R14 Initiator Ready: This indicates the initiating agent’s 
ability to complete the current data phase of the 
transaction. 


As a bus master, this signal will be asserted low when the 
device is ready to complete the current data phase 
transaction. This signal is used in conjunction with the 
TRDYB signal. Data transaction takes place at the rising 
edge of CLK when both IRDYB and TRDYB are asserted 
low. As a target, this signal indicates that the master has 
put data on the bus. 

TRDYB S/T/S 67 R16 Target Ready: This indicates the target agent’s ability to 
complete the current phase of the transaction. 

As a bus master, this signal indicates that the target is 
ready for the data during write operations and with the 
data during read operations. As a target, this signal will be 
asserted low when the (slave) device is ready to complete 
the current data phase transaction. This signal is used in 
conjunction with the IRDYB signal. Data transaction 
takes place at the rising edge of CLK when both IRDYB 
and TRDYB are asserted low. 

PAR T/S 76 M16 Parity: This signal indicates even parity across 
PCIADPIN31-0 and CBEB3-0 including the PAR pin. 
PAR is stable and valid one clock after each address 
phase. For data phase, PAR is stable and valid one clock 
after either IRDYB is asserted on a write transaction or 
TRDYB is asserted on a read transaction. Once PAR is 
valid, it remains valid until one clock after the completion 
of the current data phase. As a bus master, PAR is asserted 
during address and write data phases. As a target, PAR is 
asserted during read data phases. 

M66EN I 88 F17 66MHZ_ENABLE: This pin indicates to the device 
whether the bus segment is operating at 66 or 33MHz. 
When this pin (active high) is asserted, the current PCI 
bus segment that the device resides on operates in 
66-MHz mode. If this pin is de-asserted, the current PCI 
bus segment operates in 33-MHz mode. 

PERRB S/T/S 70 P17 Parity Error: This pin is used to report data parity errors 
during all PCI transactions except a Special Cycle. 
PERRB is driven active (low) two clocks after a data 
parity error is detected by the device receiving data, and 
the minimum duration of PERRB is one clock for each 
data phase with parity error detected. 

SERRB O/D 75 N15 System Error: If an address parity error is detected and 
Configuration Space Status register bit 15 (detected parity 
error) is enabled, the device asserts the SERRB pin low 
and bit 14 of the Status register in Configuration Space. 
STOPB S/T/S 69 T17 Stop: Indicates that the current target is requesting the 
master to stop the current transaction. 
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Symbol Type Pin No. Pin No. Description 

(128QFP) | (233BGA) 

PCIRSTB I 27 L3 Reset: When PCIRSTB is asserted low, the device 
performs an internal system hardware reset. PCIRSTB 
must be held for a minimum period of 120 ns. 

ACK64B S/T/S K2 Acknowledge 64-bit Transfer: When actively driven by 
a device that has positively decoded its address as the 
target of the current access, indicates the target is willing 
to transfer data using 64 bits. ACK64B has the same 
timing as DEVSELB. 

REQ64B S/T/S L2 Request 64-bit Transfer: When asserted by the current 
bus master, indicates it desires to transfer data using 64 
bits. REQ64B also has the same timing as FRAMEB. 

PAR64 T/S R2 Parity Upper DWORD is an even parity bit that protects 
AD[64:32] and C/BE[7:4]. PAR64 must be valid one 
clock after each address phase on any transaction in which 
REQ64B is asserted. 

5.3. EEPROM 
Table 3. EEPROM 
Symbol Type | Pin No Pin No Description 
(128QFP) | (233BGA) 

EESK O 111 All Serial data clock 

EEDI/AUX 109 Bll EEDI: Serial data input 
AUX: Input pin to detect if Aux. Power exists or not on initial 
power-on. 
This pin should be connected to EEPROM. To support wakeup 
from ACPI D3cold or APM power-down, this pin must be pulled 
high to aux. power via a resistor. If this pin is not pulled high to 
Aux. Power, the RTL8169S/RTL8110S assumes that no Aux. 
Power exists. 

EEDO 108 Al2 Serial data output 

EECS/BRO O 106 B12 EECS: EEPROM chip select 

MCSB BROMCSB: This is the chip select signal of the Boot PROM. 


5.4. Transceiver Interface 


Table 4. Transceiver Interface 
Symbol Type Pin No Pin No Description 
(128QFP) | (233BGA) 
MDI[0]+ VO 1 C2 In MDI mode, this is the first pair in 1000Base-T, i.e. the 
= BI_DA++/- pair, and is the transmit pair in 10Base-T and 

ae a 2 pt 100Base-TX. 
In MDI crossover mode, this pair acts as the BI_DB+/- pair, 
and is the receive pair in 10Base-T and 100Base-TX. 
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Symbol Type Pin No Pin No Description 
(128QFP) | (233BGA) 
MD][1]+ In MDI mode, this is the second pair in 1000Base-T, i.e. the 
BI_DB+/- pair, and is the transmit pair in 10Base-T and 
Mo 100Base-TX. 
In MDI crossover mode, this pair acts as the BI_DA+/- pair, 
and is the transmit pair in 10Base-T and 100Base-TX. 
MD][2]+ In MDI mode, this is the third pair in 1000Base-T, i.e. the 
MDI.2|— BI_DC+/- pair. 
In MDI crossover mode, this pair acts as the BI_LDD+/- pair. 
MDI[3]+ In MDI mode, this is the fourth pair in 1000Base-T, i.e. the 
MDIB|— BI_DD+/- pair. 
In MDI crossover mode, this pair acts as the BI_DC-++/- pair. 
5.5. Clock 
Table 5. Clock 
Symbol Type | Pin No Pin No Description 
(128QFP) | (233BGA) 
Xtal I 121 AS Input of 25MHz clock reference. 


122 


A6 


output of 25MHz clock reference. 


5.6. Regulator & Reference 


Table 6. Regulator & Reference 
Symbol Type | Pin No Pin No Description 
(128QFP) | (233BGA) 
CTRL25 O 8 E4 Regulator Control. Voltage control to external 2.5V regulator 
CTRL18 O 125 B3 Regulator Control. Voltage control to external 1.8V regulator 
RSET I 127 D4 Reference. External Resistor Reference. 
5.7. LEDs 
Table 7. LEDs 
Symbol Type | Pin No Pin No _ | Description 
(128QFP) | (233BGA) 
LEDO O 117 C10 LEDS 00 01 10 W 
LED1 O 115 D10 1-0 
LED2 O 114 Cll 
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LED3 O 113 D9 LINK10/ 
LEDO Tx/Rx ACT(Tx/Rx) Tx 
ACT 
LED1 LINK LINK10/100/ LINK10/100 LINK100/ 
100 1000 /1000 ACT 
LINK 
LED2 ‘6 FULL Rx FULL 
LINK LINK1000/ 
LED3 - FULL 
1000 ACT 


Note 1: During power down mode, the LED signals are logic high. 
Note 2: LEDS1-0°s initial value comes from 93C46/93C56. 


5.8. Power & Ground 


Table 8. Power & Ground 


Symbol Type Pin No Pin No Description 
(128QFP) (233BGA) 
VDD18 Power | 24, 32, 45,54, | C5, C7, D8, F14, | Digital 1.8V power supply. 
64, 78, 99, 110, | H4, K14, L4, P6, 
116,126 P9, P12 
VDD33 Power | 26, 41, 56,71, |B10, C8, C9, F15,| Digital 3.3V power supply. 


84, 94, 107 H1, H15, J2, J3, 
K15, L15, R7, R8, 
R10, R11 
GND/VSSPST | Power | 21, 22, 35, 38, | D11,D12, D13, | Digital Ground 

48, 51, 52,62, | D14, El4, G7, 
66, 73, 80, 81, G8, G9, G10, 
91, 100, 101, G11, G14, H7, 
112, 118, 119 H8, H9, H10, 
H11, H14, J4, J7, 
J8, J9, J10, J11, 
J14, K4, K7, K8, 
K9, K10, K11, L7, 
L8, L9, L10, L11, 
L14, M4, M14, 


N4, N14, P4, PS, 
P7, P8, P10, P11, 
P13, P14 
AVDDL Power 3, 7, 16, 20 C3, D3, G3, H3_ | Analog 2.5V power supply. 
AVDDH Power 10, 120 E2, C6 Analog 3.3V power supply. 
VSS Power /4, 9, 13, 17, 123,| F4, G4, C4, D5, | Analog Ground 
124, 128 D6, D7, E3 
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5.9. NC (Not Connected) Pins 


Table 9. NC (Not Connected) Pins 


Symbol Type | Pin No Pin No Description 
(128QFP) (233BGA) 
NC 11, 12,72, | Al, A2, A3, A4, A7, Not Connected. 


74 A8, AY, A10, Al4, Al6, 
B1, B2, B4, BS, B6, B7, 
B8, B9, B14, B15, Cl, 
C13, C15, F2, F3, K1, 
L1, N3, N17, P1, P15, 
U1, U10 


6. Register Descriptions 


The RTL8169S/RTL8110S provides the following set of operational registers mapped into PCI memory space or I/O space. 


Table 10. MAC Registers 


Offset 
R/W Tag Description 
0000h R/W IDRO ID Register 0: The ID registers 0-5 are only permitted to write by 
4-byte access. Read access can be byte, word, or double word access. 
The initial value is autoloaded from EEPROM EthernetID field. 


0001h IDRI ID Register 1 
0002h IDR2 ID Register 2 
0003h IDR3 ID Register 3 


0004h IDR4 ID Register 4 
0005h R/W IDRS ID Register 5 


0008h R/W MARO Multicast Register 0: The MAR registers 0-7 are only permitted to 
write by 4-bye access. Read access can be byte, word, or double 
word access. Driver is responsible for initializing these registers. 

0009h MARI Multicast Register 1 

OOOAh MAR2 Multicast Register 2 

OOOBh MAR3 Multicast Register 3 

000Ch MAR4 Multicast Register 4 
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OOOEh R/W MAR6 Multicast Register 6 
Multicast Register 7 
0010h-0017h R/W DTCCR Dump Tally Counter Command Register (64-byte alignment) 
0018h-001Fh Reserved 
0020h-0027h R/W TNPDS Transmit Normal Priority Descriptors: Start address (64-bit). 
| a | (256-byte alignment) 


0028h-002Fh R/W THPDS Transmit High Priority Descriptors: Start address (64-bit). 
(256-byte alignment) 
0030h-0036h - - Reserved 


OC 


0048h-004Bh R/W TCTR Timer CounT Register: This register contains a 32-bit 
general-purpose timer. Writing any value to this 32-bit register will 
reset the original timer and begin the count from zero. 

004Ch-004Fh R/W MPC Missed Packet Counter: This 24-bit counter indicates the number of 
packets discarded due to Rx FIFO overflow. After a s/w reset, MPC 
is cleared. Only the lower 3 bytes are valid. 
When any value is written to MPC, it will be reset. 


0054h R/W CONFIG3 Configuration Register 3 
CONFIG4 Configuration Register 4 
[ose [ee 


0058h-005Bh R/W TimerInt Timer Interrupt Register: Once having written a nonzero value to 


this register, the Timeout bit of ISR register will be set whenever the 
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TCTR reaches to this value. The Timeout bit will never be set as long 
as TimerInt register is zero. 

005Ch-005Fh Reserved 

0060h-0063h R/W PHYAR PHY Access Register 

0064h-0067h TBI Control and Status Register 


006Ah-006Bh TBI_LPAR TBI Auto-Negotiation Link Partner Ability Register 


006Ch PHYStatus PHY(GMII, MII, or TBI) Status Register 


Poona [Rt SSCSC~*Y 
Foon [Rew | Wakew2. | Pver Magee wake ane 28, ow DWord | 
ee 


00A4h-O0ABh Wakeup3LD Power Management wakeup frame3 (128bit), low D-Word 


O00ACh—00B3h Wakeup3HD Power Management wakeup frame3, high D-Word 
0O0B4h—O00BBh Wakeup4LD Power Management wakeup frame4 (128bit), low D-Word 


O0OBCh-00C3h Wakeup4HD Power Management wakeup frame4, high D-Word 


Pacnaies [a [cri vaapne 
00C6h-00C7h CRC1 16-bit CRC of wakeup frame 1 
00C8h-00C9h 16-bit CRC of wakeup frame 2 
OS 
Poonchaopm [= [Reed 
FC a 
A 
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6.1. DTCCR: Dump Tally Counter Command 


(Offset 0010h-001 7h, R/W) 


Symbol 
Description 


CntrAddr | Starting address of the 12 Tally Counters being dumped to. (64-byte alignment 
address, 64 bytes long) 


Offset of Counter Description 
starting 
address 
0 TxOk | 64-bit counter of Tx Ok packets. 
8 RxOk | 64-bit counter of Rx Ok packets. 
16 TxER | 64-bit packet counter of Tx errors including Tx 


abort, carrier lost, Tx underrun, and out of window 


collision. 


24 RxEr | 32-bit packet counter of Rx errors including CRC 
error packets (should be larger than 8 bytes) and 


missed packets. 


28 MissPkt | 16-bit counter of missed packets (CRC Ok) 
resulted from Rx FIFO full. 


30 FAE 16-bit counter of Frame Alignment Error packets 
(MII mode only) 


32 Tx1Col | 32-bit counter of those Tx Ok packets with only 1 
collision happened before Tx Ok. 


36 TxMCol | 32-bit counter of those Tx Ok packets with more 
than 1, and less than 16 collisions happened before 


Tx Ok. 


40 RxOkPhy | 64-bit counter of all Rx Ok packets with physical 


address matched destination ID. 


48 RxOkBrd | 64-bit counter of all Rx Ok packets with broadcast 


destination ID. 
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56 RxOkMu | 32-bit counter of all Rx Ok packets with multicast 
1 destination ID. 
60 TxAbt | 16-bit counter of Tx abort packets. 
62 TxUndrn | 16-bit counter of Tx underrun and discard packets 
(only possible on jumbo frames). 


Os 


3 R/W Cmd Command: When set, the RTL8169S/RTL8110S begins dumping 13 Tally counters 
to the address specified above. 
When this bit is reset by the RTL8169S/RTL81 10S, the dumping has been completed. 


Fs 


6.2. Command 


(Offset 0037h, R/W) 


2 


4 R/W RST Reset: Setting this bit to 1 forces the RTL8169S/RTL8110S into a 
software reset state which disables the transmitter and receiver, 
reinitializes the FIFOs, and resets the system buffer pointer to the initial 
value (the start address of each descriptor group set in TNPDS, THPDS, 
and RDSAR registers). The values of IDRO-5, MARO-7 and PCI 
configuration space will have no changes. This bit is 1 during the reset 
operation, and is cleared to 0 by the RTL8169S/RTL8110S when the 
reset operation is complete. 

3 R/W RE Receiver Enable 


SS 
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6.3. TPPoll: Transmit Priority Polling 


(Offset O0O38h, R/W) 
a 


High Priority Queue polling: Writing a ‘1’ to this bit will notify the 
RTL8169S/RTL8110S that there is a high priority packet(s) waiting to 
be transmitted. The RTL8169S/RTL8110S will clear this bit 


automatically after all high priority packets have been transmitted. 


Writing a ‘0’ to this bit has no effect. 


Normal Priority Queue polling: Writing a ‘1’ to this bit will notify 
the RTL8169S/RTL8110S that there is a normal priority packet(s) 
waiting to be transmitted. The RTL8169S/RTL8110S will clear this 
bit automatically after all normal priority packets have been 


transmitted. 


Writing a ‘0’ to this bit has no effect. 


- Reserved 


FSWInt Forced Software Interrupt: Writing a ‘1’ to this bit will trigger an 
interrupt, and the SWInt bit (bit8, ISR, offset3Eh-3Fh) will set. 


The RTL8169S/RTL8110S will clear this bit automatically after the 
SWInt bit (bit8, ISR) is cleared. 


Writing a ‘0’ to this bit has no effect. 


6.4. Interrupt Mask 


(Offset O0O3Ch-003Dh, R/W) 
ee ee rr 


System Error Interrupt: 


1: Enable, 0: Disable. 
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TimeOut Time Out Interrupt: 
1: Enable, 0: Disable. 
Reserved 
Software Interrupt: 
1: Enable, 0: Disable. 
Tx Descriptor Unavailable Interrupt: 
1: Enable, 0: Disable. 
Rx FIFO Overflow Interrupt: 
1: Enable, 0: Disable. 
LinkChg Link Change Interrupt: 
1: Enable, 0: Disable. 
Rx Descriptor Unavailable Interrupt: 
1: Enable, 0: Disable. 


Tx Error Interrupt: 
1: Enable, 0: Disable. 
Tx Ok: 
Transmit (Tx) OK: Indicates that a packet transmission is completed 
successfully. 
1: Enable, 0: Disable. 
Rx Error Interrupt: 
1: Enable, 0: Disable. 


foal 
R/W 
R/W 
R/W 
R/W 


Rx OK Interrupt: 
1: Enable, 0: Disable. 


6.5. Interrupt Status 


(Offset OO3Eh-003Fh, R/W) 


15 R/W SERR System Error: This bit is set to 1 when the RTL8169S/RTL8110S 
signals a system error on the PCI bus. 


14 R/W TimeOut Time Out: This bit is set to 1 when the TCTR register reaches the value 
of the TimerInt register. 
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Software Interrupt: This bit is set to 1 whenever a ‘1’ is written by 


software to FSWInt (bit0, offset D9h, TPPoll register). 


Tx Descriptor Unavailable: When set, this bit indicates that the Tx 


descriptor is unavailable. 


Rx FIFO Overflow: This bit set to 1 is caused by RDU, poor PCI 


performance, or overloaded PCI traffic. 


Rx Descriptor Unavailable: When set to 1, this bit indicates that the 


Rx descriptor is unavailable. 


The MPC (Missed Packet Counter, offset 4Ch-4Fh) indicates the 
number of packets discarded after Rx FIFO overflowed. 

Transmit (Tx) Error: This bit set to 1 indicates that a packet 
transmission was aborted, due to excessive collisions, according to the 
TXRR's setting in the TCR register. 

Transmit (Tx) OK: When set to 1, this bit indicates that a packet 
transmission has been completed successfully. 

Receive (Rx) Error: When set to 1, this bit indicates that a packet has 
either a CRC error or a frame alignment error (FAE). A Rx error packet 
of CRC error is determined according to the setting of RER8, AER, 
AR bits in RCR register (offset 44h-47h). 

Receive (Rx) OK: In normal mode, this bit set to 1 indicates the 


successful completion of a packet reception. 


| Writing | to any bit in the ISR will reset that bit. 


6.6. Transmit Configuration 


(Offset 0040h-0043h, R/W) 
a 


Reserved 


HWVERIDO Hardware Version ID0: 
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[en Fs [vs [nr [ns 


RTL8 169 
RTL8169S/RT Not (0,0) 
L8110S 


| Reserved | | Allothercombination =| other combination 


25-24 R/W IFGI, 0 InterFrameGap Time: This field allows adjustment of the interframe 
gap time to be longer than the standards of 9.6 us for 1OMbps, 960 ns for 
100Mbps, and 96 ns for 1O00Mbps. The time can be programmed from 
9.6 us to 14.4 us (1OMbps), 960ns to 1440ns (100Mbps), and 96ns to 
144ns (1O000Mbps). 

The setting of the inter frame gap is: 
IFG[2:0] | IFG@1000MHz | IFG@100MHz | IFG@10MHz 
(ns) (ns) (us) 
O;1)1 960 9.6 
1/0] 1 960+ 8 * 10 9.6+8*0.1 
1; 1/1 960 + 16 * 10 9.6+ 16 * 0.1 
0;0} 1 960 + 24 * 10 9.6 + 24 * 0.1 
0; 140 960 + 48 * 10 9.6+ 48 * 0.1 
- Other values are reserved. 
23 R HWVERID1 Hardware Version ID1: Please refer to HWVERIDO. 
22-20 - Reserved 
19 R/W IFG2 InterFrameGap2 
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LBK1, LBKO Loopback test: There will be no packets on the (G)MII or TBI 
interface in Digital loopback mode, provided the external phyceiver is 
also set in loopback mode. The digital loopback function is 


independent of the current link status. 


For analog loopback tests, software must force the external phyceiver 
into loopback mode while the RTL8169S/RTL8110S operates 


normally. 


00 : Normal operation 

01 : MAC loopback mode 
10 : Reserved 

11 : Reserved 


Append CRC: Setting this bit to 1 means that there is no CRC 
appended at the end of a packet. Setting to 0 means that there is a CRC 


appended at the end of a packet. 


= Reserved 


MXDMA2, 1, 0 Max DMA Burst Size per Tx DMA Burst: This field sets the 


maximum size of transmit DMA data bursts according to the following 


table: 


000 = 16 bytes 
001 = 32 bytes 
010 = 64 bytes 
011 = 128 bytes 
100 = 256 bytes 
101 = 512 bytes 
110 = 1024 bytes 
111 = Unlimited 


A 2 


“The TCR register can only be changed after having set TE (bit2, Command register, offset 0037h). 
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6.7. Receive Configuration 


(Offset 0044h-0047h, R/W) 


31-17 - - Reserved 

16 R/W RER8 When this bit is set to 1, the RTL8169S/RTL8110S will calculate CRC 
of any received packet with length larger than 8 bytes. 
When this bit is cleared, the RTL8169S/RTL8110S only calculates 
CRC of any received packet with length larger than 64-byte. The 
power-on default is zero. 
If AER or AR is set, the RTL8169S/RTL8110S always calculates CRC 
of any incoming packet with packet length larger than 8 bytes. The 
RER8 is “Don’t care” in this situation. 


15-13 R/W RXFTH2, 1, 0 Rx FIFO Threshold: Specifies the Rx FIFO Threshold level. When the 
number of the received data bytes from a packet, which is being 
received into the RTL8169S/RTL8110S's Rx FIFO, has reached this 
level (or the FIFO contains a complete packet), the receive PCI bus 
master function will begin to transfer the data from the FIFO to the host 
memory. This field sets the threshold level according to the following 
table: 

000 = Reserved 

001 = Reserved 

010 = 64 bytes 

011 = 128 bytes 

100 = 256 bytes 

101 = 512 bytes 

110 = 1024 bytes 

111 = no Rx threshold. The RTL8169S/RTL8110S begins the 
transfer of data after having received a whole packet in the FIFO. 

12-11 - - Reserved 


10-8 R/W MXDMAzZ, 1, 0 Max DMA Burst Size per Rx DMA Burst: This field sets the 
maximum size of the receive DMA data bursts according to the 
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following table: 

000 = Reserved 
001 = Reserved 
010 = 64 bytes 
011 = 128 bytes 
100 = 256 bytes 
101 =512 bytes 
110 = 1024 bytes 
111 = Unlimited 


a 


Datasheet 


6 R 9356SEL This bit reflects what type of EEPROM is used. 
1: The EEPROM used is 9356. 
0: The EEPROM used is 9346. 
5 R/W AER Accept Error Packet: 
When set to 1, all packets with CRC error, alignment error, and/or 
collided fragments will be accepted. 
When set to 0, all packets with CRC error, alignment error, and/or 
collided fragments will be rejected. 
4 R/W AR Accept Runt: This bit set to 1 allows the receiver to accept packets that 
are smaller than 64 bytes. The packet must be at least 8 bytes long to be 
accepted as a runt. 


[0 Few nar [ser a as it enatn adres ASST RE 


6.8. 9346CR: 93C46 (93C56) Command 


(Offset 0050h, R/W) 


EEM1-0 Operating Mode: These 2 bits select the RTL8169S/RTL8110S 
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operating mode. 


KEM | EEM0 Operating Mode 


Normal (RTL8169S/RTL8110S network/host 


communication mode) 


Auto-load: Entering this mode will make the 
RTL8169S/RTL8110S load the contents of 
the 93C46 (93C56) as when the PCI RSTB 
signal is asserted. This auto-load operation 
will take about 2 ms. Upon completion, the 
RTL8169S/RTL8110S automatically returns 
to normal mode (EEM1 = EEMO = 0) and all 
of the other registers are reset to default 
values. 

93C46 (93C56) programming: In this mode, 
both network and host bus master operations 
are disabled. The 93C46 (93C56) can be 
directly accessed via bit3-0 which now 
reflect the states of EECS, EESK, EEDI, & 
EEDO pins respectively. 

Config register write enable: Before writing 
to CONFIGx registers, the 
RTL8169S/RTL8110S must be placed in this 
mode. This will prevent 
RTL8169S/RTL8110S configurations from 


accidental change. 


Reserved 


These bits reflect the state of the EECS, EESK, EEDI & EEDO pins in 


auto-load or 93C46 (93C56) programming mode and are valid only 


when the Flash bit is cleared. 


Note: EESK, EEDI and EEDO is valid after boot ROM complete. 
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6.9. CONFIG 0 


(Offset 0051h, R/W) 


7-3 - Reserved 

2-0 BS2, BS1, BSO Select Boot ROM Size 
Case [ost [as | paciem —_| 

0 No Boot ROM 
ae eer 
a 
a 
es 
1 0 1 128K Boot ROM 


6.10. CONFIG 1 


(Offset 0052h, R/W) 


Description 
Refer to the LED PIN definition. These bits initial value com from 
93C46/93C56. 


DVRLOAD Driver Load: Software maybe use this bit to make sure that the driver has been 


loaded. Writing | is 1. Writing 0 is 0. When the command register bits IOEN, 
MEMEN, BMEN of PCI configuration space are written, the 
RTL8169S/RTL8110S will clear this bit automatically. 
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* R/W LWACT LWAKE Active Mode: The LWACT bit and LWPTN bit in CONFIG4 register 
are used to program the LWAKE pin’s output signal. According to the 
combination of these two bits, there may be 4 choices of LWAKE signal, i.e., 
active high, active low, positive (high) pulse, and negative (low) pulse. The 
output pulse width is about 150 ms. In CardBus application, the LWACT and 
LWPTN have no meaning. 


The default value of each of these two bits is 0, i.e., the default output signal of 


LWAKE pin is an active high signal. 


LWAKE output LWACT 


1 


[| ase 


LWPTN Positive pulse Negative pulse 


* Default value. 


| 3 [| oR | MEMMAP Memory Mapping: The operational registers are mapped into PCI memory space. 
rae IOMAP I/O Mapping: The operational registers are mapped into PCI I/O space. 


1 R/W VPD Vital Product Data: Set to enable Vital Product Data. The VPD data is stored in 
93C46 or 93C56 from within offset 40h-7Fh. 
R/W PMEn Power Management Enable: 
Writable only when 93C46CR register EEM1=EEM0=1 


Let A denote the New_Cap bit (bit 4 of the Status Register) in the PCI 
Configuration space offset 06h. 
Let B denote the Cap_Ptr register in the PCI Configuration space offset 34h. 


Let C denote the Cap_ID (power management) register in the PCI 


Configuration space offset 0DCh. 


Let D denote the power management registers in the PCI Configuration space 
offset from ODDh to OE 1h. 
Let E denote the Next_Ptr (power management) register in the PCI 


Configuration space offset ODDh. 

PMEn setting: 

0: A=B=C=E=0, D is invalid 

1: A=1, B=ODCh, C=01h, D is valid, E is valid and depends on whether VPD 


is enabled or not. 
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6.11. CONFIG 2 


(Offset 0053h, R) 


Symbol Description 


- Reserved 


Aux_Status Auxiliary Power Present Status: 


1: The Aux. Power is present. 


0: The Aux. Power is absent. 
The value of this bit is fixed after each PCI reset. 
PCIBusWidth PCI Bus Width: 
1: 64-bit slot 
0: 32-bit slot 
PCICLKF2-0 PCI clock frequency: 
PCICLKF2-0 


6.12. CONFIG 3 


(Offset 0054h, R/W) 


7 GNTSel Grant Select: Select the Frame’s asserted time after the Grant signal 
has been asserted. The Frame and Grant are the PCI signals. 
1: delay one clock from GNT assertion. 
0: No delay 


Magic Magic Packet: This bit is valid when the PWEn bit of CONFIG1 
register is set. The RTL8169S/RTL8110S will assert the PMEB signal 


to wakeup the operating system when the Magic Packet is received. 
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Once the RTL8169S/RTL8110S has been enabled for Magic Packet 
wakeup and has been put into an adequate state, it scans all incoming 
packets addressed to the node for a specific data sequence, which 
indicates to the controller that this is a Magic Packet frame. A Magic 
Packet frame must also meet the basic requirements: Destination 


address + Source address + data +CRC 


The destination address may be the node ID of the receiving station or a 


multicast address, which includes the broadcast address. 


The specific sequence consists of 16 duplications of 6 byte ID registers, 
with no breaks or interrupts. This sequence can be located anywhere 
within the packet, but must be preceded by a synchronization stream, 6 
bytes of FFh. The device will also accept a multicast address, as long as 
the 16 duplications of the IEEE address match the address of the ID 


registers. 


If the Node ID is 11h 22h 33h 44h 55h 66h, then the format of the Magic 


frame looks like the following: 


Destination address + source address + MISC + FF FF FF FF FF FF + 
MISC + 11 2233 4455 664+ 11 2233 4455 664 11 22 33 4455 66+ 11 
22 33 4455 66+ 11 22 33 4455 66+ 11 22 33 44 55 66 + 11 22 33 4455 
66 + 11 22 33 4455 66 + 11 22 33 4455 66+ 11 22 33 4455 66+ 11 22 
33 4455 66 + 11 22 33 4455 66 + 11 22 33 44 55 66 + 11 22 33 4455 66 
+ 11 22 33 44 55 66 + 11 22 33 44 55 66 + MISC + CRC 

Link Up: This bit is valid when the PWEn bit of the CONFIGI register 
is set. The RTL8169S/RTL8110S, in an adequate power state, will 


assert the PMEB signal to wakeup the operating system when the cable 


connection is reestablished. 


re ae FBtBEn Fast Back to Back Enable: 1: Enable, 0: Disable. 
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6.13. CONFIG 4 


(Offset 0055h, R/W) 


7-5 - - Reserved 
4 R/W LWPME LANWAKE vs PMEB: 
Set to 1: The LWAKE can only be asserted when the PMEB is 
asserted and the ISOLATEB is low. 
Set to 0: The LWAKE and PMEB are asserted at the same time. 
In CardBus applications, this bit has no meaning. 


6 


2 R/W LWPTN LWAKE pattern: Please refer to the LWACT bit in CONFIGI 
register. 


FE 


6.14. CONFIG 5 


(Offset 0056h, R/W) 


This register, unlike other Config registers, is not protected by 93C46 Command register. I.e. there is no need to enable the 


Config register write prior to writing to Config5. 


7 2 7 


Reserved 


6 R/W BWF Broadcast Wakeup Frame: 

1: Enable Broadcast Wakeup Frame with mask bytes of only DID 
field = FF FF FF FF FF FF. 

0: Default value. Disable Broadcast Wakeup Frame with mask 


bytes of only DID field = FF FF FF FF FF FF. 


The power-on default value of this bit is 0. 


mS) R/W MWEF Multicast Wakeup Frame: 
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1: Enable Multicast Wakeup Frame with mask bytes of only DID 
field, which is a multicast address. 
0: Default value. Disable Multicast Wakeup Frame with mask 


bytes of only DID field, which is a multicast address. 


The power-on default value of this bit is 0. 


4 R/W UWF Unicast Wakeup Frame: 

1: Enable Unicast Wakeup Frame with mask bytes of only DID 
field, which is its own physical address. 

0: Default value. Disable Unicast Wakeup Frame with mask bytes 


of only DID field, which is its own physical address. 


The power-on default value of this bit is 0. 


Reserved 


LANWake Signal Enable/Disable: 
1: Enable LANWake signal. 
0: Disable LANWake signal. 


PME_STS PME_Status bit: Always sticky/can be reset by PCI RST# and 
software. 


1: The PME_ Status bit can be reset by PCI reset or by software. 


0: The PME_ Status bit can only be reset by software. 
Y The bit! and bit0 are auto-loaded from EEPROM Config5 byte to the RTL8169S/RTL8110S Config5 register. 


6.15. PHYAR: PHY Access 


(Offset OO60h-0063h, R/W) 
ee 


Flag Flag bit, used as PCI VPD access method: 


1: Write data to MII register, and turn to 0 automatically whenever 
the RTL8169S/RTL8110S has completed writing to the specified 
MII register. 

0: Read data from MII register, and turn to 1 automatically whenever 


the RTL8169S/RTL8110S has completed retrieving data from the 


specified MII register. 


Integrated Gigabit Ethernet Controller 32 Rey. 1.3 


Aue REALTEK 


RTL8169S-32/RTL8169S-64 
RTL8110S-32/RTL8110S-64 


Datasheet 
30-21 - Reserved 
20-16 RegAddr4-0 5-bit GMII/MITI register address. 
15-0 Data15-0 16-bit GMII/MII register data. 


6.16. PHYStatus: PHY(GMU or TBI) Status 


(Offset O06Ch, R) 


Reserved 


TxFlow 


Transmit Flow Control: 1: Enabled, 0: Disabled. 


RxFlow 


Receive Flow Control: 1: Enabled, 0: Disabled. 


1000MF 


Link speed is 1000Mbps and in full-duplex. (GMII mode only) 


100M 


10M 


Link speed is 100Mbps. (GMII or MII mode only) 
Link speed is 1OMbps. (GMII or MII mode only) 


LinkSts 


Link Status. 1: Link Ok, 0: No Link. 


FullDup 


Full-Duplex Status: |: Full-duplex mode, 0: Half-duplex mode. 


This register is updated in less than 300us continously. 


6.17. RMS: Receive (Rx) Packet Maximum Size 


(Offset OODAh-OODBh, R) 


Rx packet Maximum Size: 

i. This register should be always set to a value other than 0, in 
order to receive packets. 

The maximum Rx packet size supported is 2-1, Le., 16K-1 
bytes. 

If this register is set to a value larger than 2? 4 (8K-1), ex. 


2'4-1, a received packet larger than 2'%-1 will set both RWT and 


yy 
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RES bits in the corresponding Rx Status Descriptor. If the 
packet, which is larger than 2 131, is received without CRC 


error, it is still a good packet, although both RWT and RES bits 


are set in the corresponding Rx Status Descriptor. 


6.18. C+CR: C+ Command 


(Offset OOEOh-O00E1h, R/W) 


a a ee Reserved. Initial value = 0. Do not change this bit. 


R/W ENDIAN Endian Mode: 
1: Big-endian mode. 
0: Little-endian mode. 
8-7 - - Reserved 
RxVLAN Receive VLAN De-tagging Enable: 1: Enable. 0: Disable. 


oe RxChkSum Receive Checksum Offload Enable: 1: Enable. 0: Disable. 


PCI Dual Address Cycle Enable: When set, the 
RTL8169S/RTL8110S will perform Tx/Rx DMA using PCI Dual 


Address Cycle only when the High 32-bit buffer address is not equal 


to 0. 
1: Enable, 0: Disable (initial value at power-up). 
PCI Multiple Read/Write Enable. 1: Enable. 0: Disable. 
- If this bit is enabled, the setting of Max Tx/Rx DMA burst 


size is no longer valid. 


| This register is the key before configuring other registers and descriptors. 


| This register is word access only, byte access to this register has no effect. 
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6.19. RDSAR: Receive Descriptor Start Address 


(Offset OOE4h-O0EBh, R/W) 


Description 


Receive Descriptor Start Address: 64-bit address, 256-byte 


alignment address. 
Bit[31:0]: Offset E7h-E4h, low 32-bit address. 
Bit[63:32]: Offset EBh-E8h, high 32-bit address. 


6.20. MTPS: Max Transmit Packet Size 


(Offset OOECh, R/W) 


ER 2 


Max Tx Packet Size: Specifies the maximum packet size that the 
RTL8169S/RTL8110S is to transmit. 
- These fields count from 000001 to 111111 in unit of 128 bytes 
(For RTL8169, the unit is 32 bytes). 
For regular LAN applications, i.e., the max packet size is either 


1518 or 1522(VLAN) bytes, this field must be larger than the 


max packet size. Ex., Ox0C. 


000000 is reserved. Do not set to this value in any situation. This 
is the default value after power-on, driver has to set value other 
than 0 for correct operation. 

To support Jumbo Frame without possible Tx underruns, this 
field is suggested to be larger than the maximum packet 
transmitted. 

The maximum Jumbo Frame (without possible Tx underruns) 


that the RTL8169S/RTL8110S is able to transmit is 7440 (7436 
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+ 4-byte CRC) bytes, therefore, this field has to be set to values 
larger than that to transmit a Jumbo Frame packet of size up to 
7440 bytes. Ex., 0x3B (7552) bytes. 

If the MTPS is set to a value larger than 0x3B, the maximum 
length of packets transmitted can not exceed 7440 (7436 + 
CRC) bytes. 

If the MTPS is set to a value less than 0x3B, ex. Ox1F, then, as 


long as the PCI performance is good enough such that there’s 


no Tx underruns, the length of the transmitted packet might be 
larger than 7440 bytes. Drivers should have to take good care 
of this configuration to transmit packets larger than 7440 bytes 


on different PC platforms to prevent from Tx underruns. 
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7. PHY Register Description 


7.1. PHY Register definitions: 


Register maps and address definitions are given in the following table: 


Table 11. PHY Registers 


Basic mode control register 


Basic mode status register 


PHY identifier register 1 


PHY identifier register 2 


Auto-negotiation advertising register 


A.uto-negotiation link partner ability register 


Auto-negotiation expansion register 


Auto-negotiation next page transmit register 


Auto-negotiation next page receive register 


1000Base-T control register 


1000Base-T status register 


1000Base-T extended status register 


7.2. PHY Register Table: 
7.2.1. BMCR (address 0x00) 


Default |Description 

Reset: 

1 = Initiate software Reset / Reset in Process. 

0 = Normal operation. 

This bit sets the status and control registers of the PHY to their default states. 


This bit, which is self-clearing, returns a value of one until the reset process is 


complete. Reset is finished once the Auto-Negotiation process has begun or 


the device has entered its forced mode. 
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Loopback 


Loopback: 

1 = Loopback enabled. 

0 = Normal operation. 

The loopback function enables MIJ/GMII transmit data to be routed to the 
MII/GMII receive data path. 


Speed[0] 


Speed Select: 

When Auto-Negotiation is disabled, bits 6 and 13 select device speed 
selection per table below: 

Speed[1] Speed[0] Speed Enabled 

1 1 = Reserved 

1 0 = 1000 Mb/s 

0 1 = 100 Mb/s 

00 = 10 Mb/s 


Auto-Negotiation Enable: 

1 = Auto-Negotiation Enabled - bits 6, 8 and 13 of this register are ignored 
when this bit is set. 

0 = Auto-Negotiation Disabled - bits 6, 8 and 13 determine the link speed and 


mode. 


Power Down: 
1 = Power down (only Management Interface and logic active.) 


0 = Normal operation. 


Isolate 


Isolate: 
1 = Isolates the Port from the MII with the exception of the serial 
management. 


0 = Normal operation. 


Restart_AN 


Restart Auto-Negotiation: 

1 = Restart Auto-Negotiation. Re-initiates the Auto-Negotiation process. If 
Auto-Negotiation is disabled (bit 12 = 0), this bit is ignored. This bit is 
self-clearing and will return a value of 1 until Auto-Negotiation is initiated, 
whereupon it will self-clear. Operation of the Auto-Negotiation process is not 
affected by the management entity clearing this bit. 


0 = Normal operation. 
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0 = Half Duplex operation. 


Reserved 0 


Speed[1] 1 Speed Select: See description for bit 13. 


Reserved 000000 Reserved by IEEE 


7.2.2. BMSR (address 0x01) 


Default Description 

100Base-T4 100BASE-T4 Capable: 

1 = Device able to perform 1OOBASE-T4 mode. 

0 = Device not able to perform 10OOBASE-T4 mode. 
RTL8169S/RTL8110S does not support 1OOBASE-T4 mode and bit 


should always be read back as “0”. 


100Base-TX(full) 100BASE-TX Full Duplex Capable: 
1 = Device able to perform 1OOBASE-TX in full duplex mode. 
0 = Device unable to perform 1O0OBASE-TX in full duplex mode. 


100Base-TX (half) 100BASE-TX Half Duplex Capable: 
1 = Device able to perform 1OOBASE-TX in half duplex mode. 
0 = Device unable to perform 100OBASE-TX in half duplex mode. 


10Base-T(full) 10BASE-T Full Duplex Capable: 
1 = Device able to perform 1OBASE-T in full duplex mode. 
0 = Device unable to perform 10OBASE-T in full duplex mode. 


10Base-T (half) 10BASE-T Half Duplex Capable: 
1 = Device able to perform 1OBASE-T in half duplex mode. 
0 = Device unable to perform 10OBASE-T in half duplex mode. 


100Base-T2(full) 100BASE-T2 Full Duplex Capable: 
1 = Device able to perform 1OOBASE-T2 Full Duplex mode. 


0 = Device unable to perform 100OBASE-T2 Full Duplex mode. 
RTL8169S/RTL8110S does not support 1OOBASE-T2 mode and bit 
should always be read back as “0”. 


100Base-T2(half) 100BASE-T2 Half Duplex Capable: 

1 = Device able to perform 1OOBASE-T2 Half Duplex mode. 

0 = Device unable to perform 1O0OBASE-T2 Full Duplex mode. 
RTL8169S/RTL8110S does not support 1OOBASE-T2 mode and bit 


should always be read back as “0”. 
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1000Base-T 


Extended status 


1000BASE-T Extended Status Register: 
1 = Device supports Extended Status Register OxOF (15). 


0 = Device does not supports Extended Status Register OxOF 


Reserved 


Reserved 


Preamble 


Suppression 


Preamble suppression Capable: 


1 = Device is able to perform management transaction with preamble 


suppressed, 32-bits of preamble is needed only once after reset, invalid 


opcode or invalid turnaround. 


Auto-Negotiation 


Complete 


Auto-Negotiation Complete: 
1 = Auto-Negotiation process complete, and contents of registers 5, 6, 
7, & 8 are valid. 


0 = Auto-Negotiation process not complete. 


Remote Fault 


Remote Fault: 

1 = Remote Fault condition detected (cleared on read or by reset). Fault 
criteria: Far End Fault Indication or notification from 

Link Partner of Remote Fault. 


0 = No remote fault condition detected. 


Auto-Negotiation 


Ability 


Auto Configuration Ability: 
1 = Device is able to perform Auto-Negotiation. 


0 = Device is not able to perform Auto-Negotiation. 


Link Status 


1 = Link is up 
0 = Link is down 


This bit indicates if link was lost since the last read. 


Jabber detect 


1 = Jabber condition detected 


0 = Jabber condition not detected 


Tadeo: 


Extended 


Capability 


1 = Extended register capability is enabled 


0 = Extended register capability is disabled 


PHY Identifier Register 1 (address 0x02) 


OUI_MSB Ro | 001C Organization unique identifier 


7.2.4. 
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OUILSB RO | C910 Organization unique identifier 


7.2.5. ANAR (address 0x04) 


Default |Description 
NextPage 1 = Advertise 


0 = Not advertised 


Resv 


Remote fault 1 = Set Remote Fault bit 


0 = Do not set Remote Fault bit 


Resv 


Asymmetric PAUSE 1 = Asymmetric Pause 


0 = No asymmetric Pause 


1 = MAC PAUSE implemented 
0 = MAC PAUSE not implemented 


100Base-T4 0 = Not capable of 1OOBASE-T4 


100Base-TX(full) 1 = Advertise 


0 = Not advertised 


100Base-TX (half) 1 = Advertise 


0 = Not advertised 


10Base-T(full) 1 = Advertise 


0 = Not advertised 


10Base-T(half) 1 = Advertise 


0 = Not advertised 


Selector field For 802.3 


7.2.6. ANLPAR (address 0x05) 


Default Description 


Next Page Received Code Word Bit 15 


ACK Received Code Word Bit 14 


Remote Fault Received Code Word Bit 13 


Technology Ability Field |RO Received Code Word Bit 12:5 


Selector Field Received Code Word Bit 4:0 
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7.2.7. |ANER (address 0x06) 


Tesv 


Default 


Description 


Resv 


Parallel Detection Fault 


1 =A fault has been detected via the Parallel Detection 
function 
0 =A fault has not been detected via the Parallel Detection 


function 


Link Partner Next 


Pageable 


1 = Link Partner is Next Page capable 


0 = Link Partner is not Next Page capable 


Local Next Pageable 


1 = Local Device is Next Page able 


Page Received 


1 =A New Page has been received 


0 = A New Page has not been received 


7.2.8. 


Link Partner 


Auto-Negotiation Able 


ANNPTR (address 0x07) 


Next Page 


Default 


1 = Link Partner is Auto-Negotiation capable 


0 = Link Partner is not Auto-Negotiation capable 


Description 


Transmit Code Word Bit 15 


Resv 


Transmit Code Word Bit 14 


Message Page 


Transmit Code Word Bit 13 


Acknowledge 2 


Transmit Code Word Bit 12 


Toggle 


Transmit Code Word Bit 11 


7.29. 


Message/Unformatted 
Field 


ANNPRR (address 0x08) 


Reserved 


Default 


Transmit Code Word Bit 10:0 


Description 


Received Code Word Bit 15 


Acknowledge 


Received Code Word Bit 14 


Message Page 


Received Code Word Bit 13 


Acknowledge 2 


Received Code Word Bit 12 


Toggle 


Received Code Word Bit 11 
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Message/Unformatted 


Field 


Test Mode 


Default 


Received Code Word Bit 10:0 


Description 

000 = Normal Mode 

001 = Test Mode | - Transmit Jitter Test 

010 = Test Mode 2 - Transmit Jitter Test (MASTER mode) 
011 = Test Mode 3 - Transmit Jitter Test (SLAVE mode) 
100 = Test Mode 4 - Transmit Distortion Test 

101, 110, 111 = Reserved 


MASTER/SLAVE 
Manual Configuration 


Enable 


1 = Manual MASTER/SLAVE configuration 
0 = Automatic MASTER/SLAVE 


MASTER/SLAVE 


Configuration Value 


1 = Manual configure as MASTER 
0 = Manual configure as SLAVE 


Port Type 


1 = Prefer multi-port device (MASTER) 
0 = Prefer single port device (SLAVE) 


1000BASE-T Full Duplex 


1 = Advertise 


0 = Not advertised 


1000BASE-T Half 
Duplex 


1 = Advertise 


0 = Not advertised 


7.2.11. 


Resv 


GBSR (address 0x0A) 


MASTER/SLAVE 


Configuration Fault 


Default 


Reserved 


Description 
1 = MASTER/SLAVE configuration fault detected 
0 = No MASTER/SLAVE configuration fault detected 


MASTER/SLAVE 


Configuration Resolution 


1 = Local PHY configuration resolved to MASTER 
0 = Local PHY configuration resolved to SLAVE 


Local Receiver Status 


1 = Local Receiver OK 
0 = Local Receiver Not OK 


Remote Receiver Status 


Integrated Gigabit Ethernet Controller 
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Link Partner 1|OOOBASE-T 1 = Link Partner is capable of 1OOOBASET full duplex 
Full Duplex Capability 0 = Link Partner is not capable of LOOOBASE-T full duplex 


Link Partner 1OOOBASE-T 1 = Link Partner is capable of 1OOOBASET half duplex 


Half Duplex Capability O = Link Partner is not capable of 1OOOBASE-T half duplex 


Reserved Reserved 


Idle Error Count MSB of Idle Error Counter 


7.2.12. GBESR (address 0x0F) 


Default |Description 


1000BASE-X FD 0 = not LOOOBASE-X full duplex capable 


1000BASE-X HD 0 = not LOOOBASE-X half duplex capable 


1000BASE-T FD 1 = 1000BASE-T full duplex capable 


1000BASE-T HD 1 = 1000BASE-T half duplex capable 


Reserved Reserved 
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8 EEPROM (93C46 or 93C56) Contents 


The RTL8169S/RTL8110S requires the attachment of an external EEPROM. The 93C46 is a 1K-bit EEPROM (the 93CS6 is a 
2K-bit EEPROM). The EEPROM interface provides the ability for the RTL8169S/RTL8110S to read from and write data to an 
external serial EEPROM device. Values in the external EEPROM allow default fields in PCI configuration space and I/O space 
to be overridden following internal power on reset or software EEPROM autoload command. The RTL8169S/RTL8110S will 
autoload values from the EEPROM to these fields in configuration space and I/O space. If the EEPROM is not present, the 
RTL8169S/RTL81 10S initialization uses default values for the appropriate Configuration and Operational Registers. Software 
can read and write to the EEPROM using “bit-bang” accesses via the 9346CR Register, or using PCI VPD. 


Although it is actually addressed by words, its contents are listed below by bytes for convenience. After the initial power on or 
auto-load command in 9346CR, the RTL8169S/RTL8110S performs a series of EEPROM read operations from the 93C46 
(93C56) address 00h to 31h. 

¥ It is suggested to obtain Realtek approval before changing the default settings of the EEPROM. 


Table 12. EEPROM Contents 


Bytes Contents 
Description 


00h 29h These 2 bytes contain ID code words for the RTL8169S/RTL8110S. The 
Olh 8ih RTL8169S/RTL8110S will load the contents of the EEPROM into the corresponding 
location if the ID word (8129h) is correct. Otherwise, the Vendor ID and Device ID of 
the PCI configuration space are "1O0ECh" and "8129h". 
02h-03h VID PCI Vendor ID: PCI configuration space offset 0Oh-01h. 


06h-07h SVID PCI Subsystem Vendor ID: PCI configuration space offset 2Ch-2Dh. 
aa ae PCI Subsystem ID: PCI configuration space offset 2Eh-2Fh. 
[om [anette sins 


MXLAT PCI Maximum Latency Timer: PCI configuration space offset 3Fh. Set by software to 
the number of PCI clocks that the RTL8169S/RTL8110S may hold the PCI bus. 


0Ch CONFIGx Reserved 


Bit 7 6 3 4 3 2 1 0 
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OEh- 13h Ethernet ID Ethernet ID: After auto-load command or hardware reset, the RTL8169S/RTL8110S 
ee | loads Ethernet ID to IDRO-IDRS of the RTL8169S/RTL8110S's I/O registers. 


16h-17h PMC Reserved: Do not change this field without Realtek approval. 
| a | Power Management Capabilities. PCI configuration space address 52h and 53h. 
posh Reserved 
19h CONFIG4 Reserved: Do not change this field without Realtek approval. 
Rata RTL8169S/RTL8110S Configuration register 4, operational registers offset 5Ah. 


1Fh CONFIG_5 Do not change this field without Realtek approval. 

Bit7-2: Reserved. 

Bitl: LANWake signal Enable/Disable 
Set to 1: Enable LANWake signal. 
Set to 0: Disable LANWake signal. 

BitO: PME_Status bit property 
Set to 1: The PME Status bit can be reset by PCI reset or by software if 
D3cold_support_PME is 0. If D3cold_support_PME=1, the PME_Status bit is a 
sticky bit. 
Set to 0: The PME_ Status bit is always a sticky bit and can only be reset by software. 


[sonst |= _[Rserd: Doi cigs eld wit Reker 
32h-33h CheckSum Reserved: Do not change this field without Realtek approval. 
mae | oesom Checksum of the EEPROM content. 
34h-3Eh - Reserved: Do not change this field without Realtek approval. 
3Fh PXE_Para Reserved: Do not change this field without Realtek approval. 
PXE ROM code parameter. 
[mr [= [Reserved Donate i el vio Rk pp CHG 
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8.1. EEPROM Related Registers 


Table 13. EEPROM Related Registers 


Offset Type Bit7 Bit6 Bit5 Bit4 Bit3 Bit2 Bitl BitO 


Name 


00h-05h | IDRO—IDRS et 


He LEDS1 a aed fre a Ee fae ad 


| LEDS! | |LEDSO| [DVRLOAD| ILwacT] = | PMEN | 


R/w* LWPME | 
LANWa | PME_ST 


= The registers marked with type = 'W*' can be written only if bits EEM1=EEMO0=1. 


Sih 


52h 


55h 
56h 


8.2. EEPROM Related Power Management Registers 


Table 14. EEPROM Related Power Management Registers 


Configuration | Name | Type Bit7 Bit6 Bit5 Bit3 Bit2 Bitl BitO 
Space offset Bit4 


mc] R | Aux_I_bl | Aux_I_b0O | pst |Reserved| PMECLK | Version 
2 | R |PME_D3.ou PME_D3hot | PME_D2|PME_D1} PME DO | p2 | pi | Aux_I_b2 
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9. PCI Configuration Space Registers 


9.1. PCI Bus Interface 


The RTL8169S/RTL8110S implements the PCI bus interface as defined in the PCI Local Bus Specifications Rev. 2.2. When 
internal registers are being accessed, the RTL8169S/RTL8110S acts as a PCI target (slave mode). When accessing host memory 
for descriptor or packet data transfer, the RTL8169S/RTL8110S acts as a PCI bus master. 


All of the required pins and functions are implemented in the RTL8169S/RTL8110S as well as the optional pin, INTAB for 
support of interrupt requests is implemented as well. The bus interface also supports 64-bit and 66MHz operation in addition to 
the more common 32-bit and 33-MHz capabilities. For more information, refer to the PCI Local Bus Specifications Rev. 2.2, 


December 18, 1998. 


9.1.1. Byte Ordering 

The RTL8169S/RTL8110S can be configured to order the bytes of data on the PCI AD bus to conform to little-endian or 
big-endian ordering through the use of the ENDIAN bit of the C+ Command Register. When the RTL8169S/RTL81 10S is 
configured in big-endian mode, all the data in data phase of either memory or I/O transaction to or from RTL8169S/RTL81 10S 
is in big-endian mode. All data in data phase of any PCI configuration transaction to RTL8 169S/RTL8110S should be in 


little-endian mode, no matter the RTL8169S/RTL8110S is set to big-endian or little-endian mode. 


When configured for little-endian (ENDIAN bit=0), the byte orientation for receive and transmit data and descriptors in system 


memory is as follows: 


31 24-23 16 15 8 7 0 
C/BE[3] C/BE[2] C/BE[1] C/BE[0] 
(MSB) (LSB) 


Little-Endian Byte Ordering 


When configured for big-endian mode (ENDIAN bit=1), the byte orientation for receive and transmit data and descriptors in 


system memory is as follows: 


31 24 23 16 15 8 7 0 
C/BE[3] C/BE[2] C/BE[1] C/BE[0] 
(LSB) (MSB) 


Big-Endian Byte Ordering 
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9.1.2. Interrupt Control 

Interrupts are performed by asynchronously asserting the INTAB pin. This pin is an open drain output. The source of the 
interrupt can be determined by reading the Interrupt Status Register (ISR). One or more bits in the ISR will be set, denoting all 
currently pending interrupts. Writing 1 to any bit in ISR register clears that bit. Masking of specific interrupts can be 
accomplished by using the Interrupt Mask Register (IMR). Assertion of INTAB can be prevented by clearing the Interrupt 


Enable bit in the Interrupt Mask Register. This allows the system to defer interrupt processing as needed. 


9.1.3. Latency Timer 

The PCI Latency Timer described in LTR defines the maximum number of bus clocks that the device will hold the bus. Once the 
device gains control of the bus and issues FRAMEB, the Latency Timer will begin counting down. The LTR register specifies, in 
units of PCI bus clocks, the value of the latency timer of the RTL8169S/RTL8110S. When the RTL8169S/RTL8110S asserts 
FRAMEB, it enables its latency timer to count. If the RTL8169S/RTL8110S deasserts FRAMEB prior to count expiration, the 
content of the latency timer is ignored. Otherwise, after the count expires, the RTL8169S/RTL8110S initiates transaction 


termination as soon as its GNTB is deasserted. Software is able to read or write to LTR, and the default value is OOH. 


9.1.4. 64-Bit Data Operation 
The RTL8169S/RTL8110S samples the REQ64B pin at PCI RSTB deasserted to determine if the bus is 64-bit capable. 


9.1.5.  64-Bit Addressing 
The RTL8169S/RTL8110S supports 64-bit addressing (Dual Address Cycle, DAC) as a bus master for transferring descriptor 
and packet data information. The DAC mode can be enabled or disabled through software. The RTL8169S/RTL8110S only 


supports 32-bit addressing as a target. 


9.2. Bus Operation 


9.2.1. Target Read 

A Target Read operation starts with the system generating FRAMEB, Address, and either an IO read (0010b) or Memory Read 
(0110b) command. If the 32-bit address on the address bus matches the IO address range specified in IOAR (for I/O reads) or the 
memory address range specified in MEM (for memory reads), the RTL8169S/RTL8110S will generate DEVSELB 2 clock 
cycles later (medium speed). The system must tri-state the Address bus, and convert the C/BE bus to byte enables, after the 
address cycle. On the 2nd cycle after the assertion of DEVSELB, all 32-bits of data and TRDYB will become valid. If IRDYB is 


asserted at that time, TRDYB will be forced HIGH on the next clock for 1 cycle, and then tri-stated. 


If FRAMEB is asserted beyond the assertion of IRDYB, the RTL8169S/RTL8110S will still make data available as described 
above, but will also issue a Disconnect. That is, it will assert the STOPB signal with TRDYB. STOPB will remain asserted until 


FRAMEBB is detected as deasserted. 
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PERRB 


Figure 5. Target Read Operation 


9.2.2. Target Write 

A Target Write operation starts with the system generating FRAMEB, Address, and Command (0011b or 011 1b). If the upper 24 
bits on the address bus match IOAR (for I/O reads) or MEM (for memory reads), the RTL8169S/RTL8110S will generate 
DEVSELB 2 clock cycles later. On the 2nd cycle after the assertion of DEVSELB, the device will monitor the IRDYB signal. If 
IRDYB is asserted at that time, the RTL8169S/RTL8110S will assert TRDYB. On the next clock the 32-bit double word will be 


latched in, and TRDYB will be forced HIGH for 1 cycle and then tri-stated. Target write operations must be 32-bits wide. 


If FRAMEB is asserted beyond the assertion of IRDYB, the RTL8169S/RTL8110S will still latch the first double word as 
described above, but will also issue a Disconnect. That is, it will assert the STOPB signal with TRDYB. STOPB will remain 


asserted until FRAMEB is detected as deasserted. 


ed ee A ee a 
I  —__________ es 


FRAMEB 
aoa 
a 
IROYB ap 
TRDYB $$, f ———————— 
DEVSELB {—— 
[SR __| a Y 
PERRS) ___{___}/ 72. 


Figure 6. Target Write Operation 
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9.2.3. Master Read 

A Master Read operation starts with the RTL8169S/RTL8110S asserting REQB. If GNTB is asserted within 2 clock cycles, 
FRAMEB, Address, and Command will be generated 2 clocks after REQB (Address and FRAMEB for | cycle only). If GNTB is 
asserted 3 cycles or later, FRAMEB, Address, and Command will be generated on the clock following GNTB. 


The device will wait for 8 cycles for the assertion of DEVSELB. If DEVSELB is not asserted within 8 clocks, the device will 
issue a master abort by asserting FRAMEB HIGH for 1 cycle, and IRDYB will be forced HIGH on the following cycle. Both 


signals will become tri-state on the cycle following their deassertion. 


On the clock edge after the generation of Address and Command, the address bus will become tri-state, and the C/BE bus will 
contain valid byte enables. On the clock edge after FRAMEB was asserted, IRDYB will be asserted (and FRAMEB will be 
deasserted if this is to be a single read operation). On the clock where both TRDYB and DEVSELB are detected as asserted, data 
will be latched in (and the byte enables will change if necessary). This will continue until the cycle following the deassertion of 


FRAMEB. 


On the clock where the second to last read cycle occurs, FRAMEB will be forced HIGH (it will be tri-stated 1 cycle later). On the 
next clock edge that the device detects TRDYB asserted, it will force IRDYB HIGH. It, too, will be tri-stated 1 cycle later. This 


will conclude the read operation. The RTL8169S/RTL8110S will never force a wait state during a read operation. 


AD[31:0] ar} re as a 
CIBE[3:0] ee es a Ss as 
RE@aB fi 

GNTB Ff >} 
IRDYB res 
TRDYB "7 
DEVSELB rr 
PAR — = a a aoe 


Figure 7. Master Read Operation 


9.2.4. Master Write 

A Master Write operation starts with the RTL8169S/RTL8110S asserting REQB. If GNTB is asserted within 2 clock cycles, 
FRAMEB, Address, and Command will be generated 2 clocks after REQB (Address and FRAMEB for 1| cycle only). If GNTB is 
asserted 3 cycles or later, FRAMEB, Address, and Command will be generated on the clock following GNTB. 
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The device will wait for 8 cycles for the assertion of DEVSELB. If DEVSELB is not asserted within 8 clocks, the device will 
issue a Master Abort by asserting FRAMEB HIGH for | cycle. IRDYB will be forced HIGH on the following cycle. Both signals 


will become tri-state on the cycle following their deassertion. 


On the clock edge after the generation of Address and Command, the data bus will become valid, and the C/BE bus will contain 
valid byte enables. On the clock edge after FRAMEB was asserted, IRDYB will be asserted (and FRAMEB will be deasserted if 
this is to be a single read operation). On the clock where both TRDYB and DEVSELB are detected as asserted, valid data for the 
next cycle will become available (and the byte enables will change if necessary). This will continue until the cycle following the 
deassertion of FRAMEB. 

On the clock where the second to last write cycle occurs, FRAMEB will be forced HIGH (it will be tri-stated 1 cycle later). On 
the next clock edge that the device detects TRDYB asserted, it will force IRDYB HIGH. It, too, will be tri-stated 1 cycle later. 


This will conclude the write operation. The RTL8169S/RTL8110S will never force a wait state during a write operation. 


aaa a WN oY ge oe eae ee 

FRAMEB ye pF 
AD[31:0] Loi Fs as a 
CIBE[3:0] es ee as as 


Figure 8. Master Write Operation 


9.2.5. Configuration Access 

Configuration register accesses are similar to target reads and writes in that they are single data word transfers and are initiated by 
the system. For the system to initiate a Configuration access, it must also generate IDSEL as well as the correct Command (1010b 
or 101 1b) during the Address phase. The RTL8169S/RTL8110S will respond as it does during Target operations. Configuration 


reads must be 32-bits wide, but writes may access individual bytes. 
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9.3. Packet Buffering 


The RTL8169S/RTL8110S incorporates two independent FIFOs for transferring data to/from the system interface and from/to 


the network. The FIFOs, providing temporary storage of data freeing the host system from the real-time demands of the network. 


The way in which the FIFOs are emptied and filled is controlled by the FIFO threshold values in the Max Transmit Packet Size 
and Receive Configuration registers. These values determine how full or empty the FIFOs must be before the device requests the 
bus. Once the RTL8169S/RTL8110S requests the bus, it will attempt to empty or fill the FIFOs as allowed by the respective 


MXDMA settings in the Transmit Configuration and Receive Configuration registers. 


9.3.1. Transmit Buffer Manager 
The buffer management scheme used on the RTL8169S/RTL8110S allows quick, simple and efficient use of the frame buffer 
memory. The buffer management scheme uses separate buffers and descriptors for packet information. This allows effective 


transfers of data to the transmit buffer manager by simply transferring the descriptor information to the transmit queue. 


The Tx Buffer Manager DMAs packet data from system memory and places it in the 8KB transmit FIFO, and pulls data from the 
FIFO to send to the Tx MAC. Multiple packets may be present in the FIFO, allowing packets to be transmitted with minimum 
interframe gap. Additionally, once the RTL8169S/RTL8110S requests the bus, it will attempt to fill the FIFO as allowed by the 
MXDMaA setting. 


The Tx Buffer Manager process also supports priority queuing of transmit packets. It handles this by drawing from two separate 
descriptor lists to fill the internal FIFO. If packets are available in the high priority queues, they will be loaded into the FIFO 


before those of low priority. 


9.3.2. Receive Buffer Manager 

The Rx Buffer Manager uses the same buffer management scheme as used for transmits. The Rx Buffer Manager retrieves packet 
data from the Rx MAC and places it in the 64KB receive data FIFO, and pulls data from the FIFO for DMA to system memory. 
Similar to the transmit FIFO, the receive FIFO is controlled by the FIFO threshold value in RXFTH. This value determines the 
number of long words written into the FIFO from the MAC unit before a DMA request for system memory occurs. Once the 
RTL8169S/RTL8110S gets the bus, it will continue to transfer the long words from the FIFO until the data in the FIFO is less 


than one long word, or has reached the end of the packet, or the max DMA burst size is reached, as set in MXDMA. 


9.3.3. Packet Recognition 


The Rx packet filter and recognition logic allows software to control what packets are to be accepted, based on destination 
address and packet type. Address recognition logic includes support for broadcast, multicast hash, and unicast addresses. The 


packet recognition logic includes support for WOL, Pause, and programmable pattern recognition. 
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9.4. PCI Configuration Space Table 


Table 15. PCI Configuration Space Table 


ef seer el oe [owe [ms [oe [oo [ot [on 


VID 


a ee Ps [won| vo: 
LR VID15 VID14 VID13 VID12 VID11 


| pipis_| | pipia_ | | DIDI3 | | DIDI2 | | DIDI 


VID10 
DID2 
DID10 

BMEN 


o tt PERRSP MWIEN 
Es rod ro 


05h 
2 a ae 


LR DPERR SSERR RMABT | RTABT | STABT 
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The above table is based on both VPD and Power Management are enabled. 


9.5. PCI Configuration Space Functions 


The PCI configuration space is intended for configuration, initialization, and catastrophic error handling functions. The functions 


of the RTL8169S/RTL8110S's configuration space are described below. 


VID: Vendor ID. This field will be set to a value corresponding to PCI Vendor ID in the external EEPROM. If there is no 
EEPROM, this field will default to a value of 1OECh which is Realtek Semiconductor's PCI Vendor ID. 


DID: Device ID. This field will be set to a value corresponding to PCI Device ID in the external EEPROM. If there is no 
EEPROM, this field will default to a value of 8129h. 


Command: The command register is a 16-bit register used to provide coarse control over a device's ability to generate and 


respond to PCI cycles. 


Table 16. Command Register in PCI Config Space 
Description 
Reserved 
Fast Back-To-Back Enable: Config3<FBtBEn>=0:Read as 0. Write operation has no effect. The 
RTL8169S/RTL8110S will not generate Fast Back-to-back cycles. When Config3<FbtBEn>=1, 


This read/write bit controls whether or not a master can do fast back-to-back transactions to 


different devices. Initialization software will set the bit if all targets are fast back-to-back capable. 


A value of 1 means the master is allowed to generate fast back-to-back transaction to different 
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agents. A value of 0 means fast back-to-back transactions are only allowed to the same agent. This 
Ltt bit’s state after RST# is 0. 
8 SERREN System Error Enable: When set to 1, the RTL8169S/RTL8110S asserts the SERRB pin when it 
detects a parity error on the address phase (AD<31:0> and CBEB<3:0> ). 
7 ADSTEP Address/Data Stepping: Read as 0, and write operations have no effect. The 
RTL8169S/RTL8110S never performs address/data stepping. 

PERRSP Parity Error Response: When set to 1, the RTL8169S/RTL8110S will assert the PERRB pin on 
the detection of a data parity error when acting as the target, and will sample the PERRB pin as the 
master. When set to 0, any detected parity error is ignored and the RTL8169S/RTL8110S continues 
normal operation. 

Parity checking is disabled after hardware reset (RSTB). 


VGASNOOP_ | VGA palette SNOOP: Read as 0, write operations have no effect. 


MWIEN Memory Write and Invalidate cycle Enable: This is an enable bit for using the Memory Write 
and Invalidate command. When this bit is 1, the RTL8169S/RTL8110S as a master may generate 
the command. When this bit is 0, the RTL8169S/RTL8110S may generate Memory Write 


command instead. State after PCI RSTB is 0. 


=z 
SCYCEN Special Cycle Enable: Read as 0, write operations have no effect. The RTL8169S/RTL8110S 
vp ignores all special cycle operations. 
Bus Master Enable: When set to 1, the RTL8169S/RTL8110S is capable of acting as a PCI bus 
master. When set to 0, it is prohibited from acting as a bus master. 
For normal operations, this bit must be set by the system BIOS. 
MEMEN Memory Space Access: When set to 1, the RTL8169S/RTL8110S responds to memory space 
Cee accesses. When set to 0, the RTL8169S/RTL8110S ignores memory space accesses. 
IOEN I/O Space Access: When set to 1, the RTL8169S/RTL8110S responds to IO space accesses. When 
ia set to 0, the RTL8169S/RTL8110S ignores I/O space accesses. 


Status: The status register is a 16-bit register used to record status information for PCI bus related events. Reads to this register 


behave normally. Writes are slightly different in that bits can be reset, but not set. 


Table 17. Status Register in PCI Config Space 
Description 


Detected Parity Error: This bit, when set, indicates that the RTL8169S/RTL8110S has detected a 


parity error, even if parity error handling is disabled in command register PERRSP bit. 


Signaled System Error: This bit, when set, indicates that the RTL8169S/RTL8110S has asserted the 


system error pin, SERRB. Writing a | clears this bit to 0. 
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Received Master Abort: This bit, when set, indicates that the RTL8169S/RTL8110S has terminated a 
master transaction with master abort. Writing a 1 clears this bit to 0. 
Received Target Abort: This bit, when set, indicates that an RTL8169S/RTL8110S master transaction 


was terminated due to a target abort. Writing a 1 clears this bit to 0. 


Signaled Target Abort: This bit is set to 1 whenever the RTL8169S/RTL8110S terminates a 
transaction with a target abort. Writing a 1 clears this bit to 0. 

Device Select Timing: These bits encode the timing of DEVSELB. They are set to 01b (medium), 
indicating the RTL8169S/RTL8110S will assert DEVSELB two clocks after FRAMEB is asserted. 


Data Parity error Detected: This bit is set when the following conditions are met: 

* The RTL8 169S/RTL81 10S asserts parity error (PERRB pin) or it senses the assertion of PERRB pin by another 
device. 

* The RTL8169S/RTL8110S operates as a bus master for the operation that caused the error. 

* The Command register PERRSP bit is set. 

Writing a | clears this bit to 0. 

Fast Back-To-Back Capable: Config3<FbtBEn>=0, Read as 0, write operations have no effect. 

Config3<FbtBEn>=1, Read as 1. 

User Definable Features Supported: Read as 0, and write operations have no effect. The 


RTL8169S/RTL8110S does not support UDF. 


66MHz Capable: Read as 1, and write operations have no effect. The RTL8169S/RTL8110S supports 
66MHz PCI clock. 


New Capability: Config3<PMEn>=0, Read as 0, and write operations have no effect. 
Config3<PMEn>=1, Read as 1 


RID: Revision ID Register 


The Revision ID register is an 8-bit register that specifies the RTL8169S/RTL8110S controller revision number. 


PIFR: Programming Interface Register 
The programming interface register is an 8-bit register that identifies the programming interface of the 
RTL8169S/RTL8110S controller. The PCI specification reversion 2.1 doesn't define any other specific value for 
network devices. So PIFR = 00h. 


SCR: Sub-Class Register 
The Sub-class register is an 8-bit register that identifies the function of the RTL8169S/RTL8110S. SCR = 00h indicates 
that the RTL8169S/RTL8110S is an Ethernet controller. 


BCR: Base-Class Register 
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The Base-class register is an 8-bit register that broadly classifies the function of the RTL8169S/RTL8110S. BCR = 02h 
indicates that the RTL8169S/RTL8110S is a network controller. 


CLS: Cache Line Size 
Specifies, in units of 32-bit words (double-words), the system cache line size. The RTL8169S/RTL8110S supports cache 
line size of 8, and 16 longwords (DWORDs). The RTL8169S/RTL8110S uses Cache Line Size for PCI commands that 


are cache oriented, such as memory-read-line, memory-read-multiple, and memory-write-and-invalidate. 


LTR: Latency Timer Register 
Specifies, in units of PCI bus clocks, the value of the latency timer of the RTL8169S/RTL8110S. 
When the RTL8169S/RTL8110S asserts FRAMEB, it enables its latency timer to count. If the RTL8169S/RTL8110S 
deasserts FRAMEB prior to count expiration, the content of the latency timer is ignored. Otherwise, after the count 
expires, the RTL8169S/RTL81 10S initiates transaction termination as soon as its GNTB is deasserted. Software is able to 


read or write, and the default value is 00h. 


HTR: Header Type Register 


Reads will return a 0, writes are ignored. 


BIST: Built-in Self Test 


Reads will return a 0, writes are ignored. 


IOAR: This register specifies the BASE IO address which is required to build an address map during configuration. It also 


specifies the number of bytes required as well as an indication that it can be mapped into IO space. 


Table 18. IOAR Register in PCI Config Space 


IOAR31-8 | BASE IO Address: This is set by software to the Base IO address for the operational register map. 


7-2 IOSIZE | Size Indication: Read back as 0. This allows the PCI bridge to determine that the 
RTL8169S/RTL8110S requires 256 bytes of IO space. 


6 


IOIN IO Space Indicator: Read only. Set to 1 by the RTL8169S/RTL81 10S to indicate that it is capable of 
being mapped into IO space. 


MEMAR: This register specifies the base memory address for memory accesses to the RTL8169S/RTL8110S operational 


registers. This register must be initialized prior to accessing any RTL8169S/RTL8110S's register with memory 


access. 


Table 19. MEMAR Register in PCI Config Space 


MEM31-8 | Base Memory Address: This is set by software to the base address for the operational register map. 
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7-4 MEMSIZE | Memory Size: These bits return 0, which indicates that the RTL8169S/RTL8110S requires 256 bytes of 
Memory Space. 


MEMPF | Memory Prefetchable: Read only. Set to 0 by the RTL8169S/RTL8110S. 
2-1 MEMLOC | Memory Location Select: Read only. Set to 0 by the RTL8169S/RTL8110S. This indicates that the 
base register is 32-bits wide and can be placed anywhere in the 32-bit memory space. 


MEMIN | Memory Space Indicator: Read only. Set to 0 by the RTL8169S/RTL8110S to indicate that it is 
capable of being mapped into memory space. 


SVID: Subsystem Vendor ID. This field will be set to a value corresponding to PCI Subsystem Vendor ID in the external 
EEPROM. If there is no EEPROM, this field will default to a value of 1OECh which is Realtek Semiconductor's PCI 


Subsystem Vendor ID. 


SMID: Subsystem ID. This field will be set to value corresponding to PCI Subsystem ID in the external EEPROM. If there is no 
EEPROM, this field will default to a value of 8129h. 


BMAR: This register specifies the base memory address for memory accesses to the RTL8169S/RTL81 10S operational registers. 


This register must be initialized prior to accessing any of the RTL8169S/RTL8110S's register with memory access. 


Table 20. BMAR Register in PCI Config Space 
BMAR31-18 | Boot ROM Base Address 
ROMSIZE | Boot ROM Size: These bits indicate how many Boot ROM spaces to be supported. The Relationship 
between Config 0 <BS2:0> and BMARI17-11 is as follows: 
BS2 BS1 BSO Description 
0 No Boot ROM, BROMEN=0 (R) 
1 8K Boot ROM, BROMEN (R/W), BMAR12-11 = 0 (R), BMARI7-13 (R/W) 
0 16K Boot ROM, BROMEN (R/W), BMAR13-11 = 0 (R), BMARI7-14 (R/W) 


32K Boot ROM, BROMEN (R/W), BMAR14-11 = 0 (R), BMARI7-15 (R/W) 
64K Boot ROM, BROMEN (R/W), BMAR15-11 = 0 (R), BMARI17-16 (R/W) 
128K Boot ROM, BROMEN(R/W), BMAR1I6-11=0 (R), BMARI7 (R/W) 


unused 


unused 


1 1 1 
sen = | Reserved (read back 0) 
| o_| BROMEN | Boot ROM Enable: This is used by the PCI BIOS to enable accesses to Boot ROM. 


ILR: Interrupt Line Register 


The Interrupt Line Register is an 8-bit register used to communicate with the routing of the interrupt. It is written by the 


POST software to set interrupt line for the RTL8169S/RTL8110S. 
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IPR: Interrupt Pin Register 
The Interrupt Pin register is an 8-bit register indicating the interrupt pin used by the RTL8169S/RTL8110S. The 
RTL8169S/RTL8110S uses INTA interrupt pin. Read only. IPR = 01h. 


MNGNT: Minimum Grant Timer: Read only 
Specifies how long a burst period the RTL8169S/RTL8110S needs in units of 1/4 microsecond. This field will be set to a 
value from the external EEPROM. If there is no EEPROM, this field will default to a value of 20h. 


MXLAT: Maximum Latency Timer: Read only 
Specifies how often the RTL8 169S/RTL8110S needs to gain access to the PCI bus in unit of 1/4 microsecond. This field 
will be set to a value from the external EEPROM. If there is no EEPROM, this field will default to a value of 20h. 


9.6. Default Value After Power-on (RSTB asserted) 


Table 21. Power-on Default Value in PCI Configuration Space 
a 


= Command = 
ee Pg ee a a a ra 


OSh 


Status 


WwW DPERR | SSERR | RMABT | | 
Revision ID R 0 0 0 
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RESERVED(ALL 0) 


9.7. Power Management Function 


The RTL8169S/RTL8110S is compliant with ACPI (Rev 1.0, 1.0b, 2.0), PCI Power Management (Rev 1.1), and Network 
Device Class Power Management Reference Specification (V1.0a), such as to support an OS-directed Power Management 
(OSPM) environment. 


The RTL8169S/RTL8110S can monitor the network for a Wakeup Frame, a Magic Packet, or a Re-LinkOk, and notify the 
system via PME# when such a packet or event occurs. Then, the whole system can be restored to a normal state to process 
incoming jobs. 


When the RTL8169S/RTL8110S is in power down mode (D1 ~ D3): 

e The Rx state machine is stopped, and the RTL8169S/RTL8110S monitors the network for wakeup events such as a Magic 
Packet, Wakeup Frame, and/or Re-LinkOk, in order to wake up the system. When in power down mode, the 
RTL8169S/RTL8110S will not reflect the status of any incoming packets in the ISR register and will not receive any 
packets into the Rx FIFO buffer. 

e The FIFO status and packets that have already been received into the Rx FIFO before entering power down mode are held 
by the RTL8169S/RTL8110S. 

e Transmission is stopped. PCI bus master mode is stopped. The Tx FIFO buffer is held. 

e _ After restoration to a DO state, the RTL8169S/RTL8110S transfers data that was not moved into the Tx FIFO buffer during 


power down mode. Packets that were not transmitted completely last time are re-transmitted. 


The D3cold_support_PME bit (bit15, PMC register) and the Aux_I_b2:0 bits (bit8:6, PMC register) in PCI configuration space 
depend on the existence of Aux power (bit15, PMC) = 1. 

If EEPROM D3cold_support_PME bit (bit15, PMC) = 0, the above 4 bits are all 0's. 

Example: 

If EEPROM D3c_support_PME = 1: 


e If Aux. power exists, then PMC in PCI config space is the same as EEPROM PMC 
(if EEPROM PMC = C2 F7, then PCI PMC = C2 F7) 

e If Aux. power is absent, then PMC in PCI config space is the same as EEPROM PMC except the above 4 bits are all 0’s 
(if EEPROM PMC = C2 F7, the PCI PMC = 02 76) 


In the above case, if wakeup support is desired when main power is off, it is suggested that the EEPROM PMC be 
set to C2 F7 (Realtek EEPROM default value). 


If EEPROM D3c_support_PME = 0: 
e If Aux. power exists, then PMC in PCI config space is the same as EEPROM PMC 
(if EEPROM PMC = C2 77, then PCI PMC = C2 77) 
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e If Aux. power is absent, then PMC in PCI config space is the same as EEPROM PMC except the above 4 bits are all 0’s. 
(if EEPROM PMC = C2 77, then PCI PMC = 02 76) 


In the above case, if wakeup support is not desired when main power is off, it is suggested that the EEPROM PMC be 
set to 02 76. 


Link Wakeup occurs only when the following conditions are met: 
e = The LinkUp bit (CONFIG3#4) is set to 1, the PMEn bit (CONFIG1#0) is set to 1, and the PME# can be asserted in the 
current power state. 


e The Link status is re-established. 


Magic Packet Wakeup occurs only when the following conditions are met: 

e The destination address of the received Magic Packet is acceptable to the RTL8169S/RTL81108, e.g. a broadcast, multicast, 
or unicast packet addressed to the current RTL8169S/RTL81 10S adapter. 

e The received Magic Packet does not contain a CRC error. 

e = The Magic bit (CONFIG3#5) is set to 1, the PMEn bit (CONFIG1#0) is set to 1, and the PME# can be asserted in the current 
power state. 

e The Magic Packet pattern matches, i.e. 6 * FFh + MISC (can be none) + 16 * DID(Destination ID) in any part of a valid 
(Fast) Ethernet packet. 


A Wakeup Frame event occurs only when the following conditions are met: 

e The destination address of the received Wakeup Frame is acceptable to the RTL8169S/RTL81 108, e.g. a broadcast, 
multicast, or unicast address to the current RTL8169S/RTL8110S adapter. 

e The received Wakeup Frame does not contain a CRC error. 

e The PMEn bit (CONFIG1#0) is set to 1. 

e = The 16-bit CRC* of the received Wakeup Frame matches with the 16-bit CRC* of the sample Wakeup Frame pattern given 
by the local machine’s OS. Or, the RTL8169S/RTL8110S is configured to allow direct packet wakeup, e.g. a broadcast, 
multicast, or unicast network packet. 


*16-bit CRC: The RTL8169S/RTL8110S supports two normal wakeup frames (covering 64 mask bytes from offset 0 to 63 of 
any incoming network packet) and three long wakeup frames (covering 128 mask bytes from offset 0 to 127 of any incoming 
network packet). 


The PME# signal is asserted only when the following conditions are met: 

1. The PMEn bit (bit0, CONFIG1) is set to 1. 

2. The PME _En bit (bit8, PMCSR) in PCI Configuration Space is set to 1. 

3. The RTL8169S/RTL8110S may assert PME# in the current power state or in isolation state, depending on the 
PME_Support (bit15-11) setting of the PMC register in PCI Configuration Space. 

4. A Magic Packet, LinkUp, or Wakeup Frame been received. 
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5. Writing a 1 to the PME Status (bit15) of the PMCSR register in the PCI Configuration Space clears this bit and causes the 
RTL8169S/RTL8110S to stop asserting a PME# (if enabled). 


When the device is in power down mode, e.g. D1-D3, the IO, MEM, and Boot ROM spaces are all disabled. After a RST# 
assertion, the device’s power state is restored to DO automatically if the original power state was D3,.o1g. There is no hardware 
delay at the device’s power state transition. When in ACPI mode, the device does not support PME (Power Management 
Enable) from DO (this is the Realtek default setting of the PMC register auto loaded from EEPROM). The setting may be 
changed from the EEPROM, if required). The RTL8169S/RTL8110S also supports the legacy LAN WAKE-UP function. The 
LWAKE pin is used to notify legacy motherboards to execute the wake-up process whenever the device receives a wakeup 
event, such as Magic Packet. 


The LWAKE signal is asserted according to the following settings: 
1. LWPME bit (bit4, CONFIG4): 
e LWAKE can only be asserted when the PMEB is asserted and the ISOLATEB is low. 


e LWAKE is asserted whenever a wakeup event occurs. 


2. Bitl of DELAY byte (offset 1Fh, EEPROM): 
e LWAKE signal is enabled. 
e LWAKE signal is disabled. 


9.8. Vital Product Data (VPD) 


Bit 31 of the VPD is used to issue VPD read/write command and is also a flag used to indicate whether the transfer of data 


between the VPD data register and the 93C46/93C56 is completed or not. 


1. Write VPD register: (write data to 93C46/93C56) 
Set the flag bit to 1 at the same time the VPD address is written to write VPD data to EEPROM. When the flag bit is reset 
to 0 by the RTL8169S/RTL8110S, the VPD data (4 bytes per VPD access) has been transferred from the VPD data 
register to EEPROM. 


2. Read VPD register: (read data from 93C46/93C56) 
Reset the flag bit to 0 at the same time the VPD address is written to retrieve VPD data from EEPROM. When the flag bit 
is set to 1 by the RTL8169S/RTL8110S, the VPD data (4 bytes per VPD access) has been transferred from EEPROM to 
the VPD data register. 


- Please refer to PCI Configuration Space Table in Section 8.1 and PCI 2.2 Specifications for further information. 

- The VPD address does not have to be a DWORD-aligned address as defined in the PCI 2.2 Specifications, but the 
VPD data is always consecutive 4-byte data starting from the VPD address specified. 

- Realtek reserves offset 40h to 7Fh in EEPROM mainly for VPD data to be stored. 
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- | The VPD function of the RTL8169S/RTL81 10S is designed to be able to access the full range of the 93C46 EEPROM 
(for 93C56, only the 1“ half of the EEPROM content can be accessed via VPD). 
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10. Functional Description 


10.1. Transmit & Receive Operations 


The RTL8169S/RTL8110S supports a new descriptor-based buffer management that will significantly reduce host CPU 
utilization and is more suitable for server application. The new buffer management algorithm provides capabilities of 
Microsoft Large-Send offload, IP checksum offload, TCP checksum offload, UDP checksum offload, and IEEE802.1P, 802.1Q 
VLAN tagging. The RTL8169S/RTL8110S supports up to 1024 consecutive descriptors in memory for transmit and receive 
separately, which means there might be 3 descriptor rings, one is a high priority transmit descriptor ring, another is a normal 
priority transmit descriptor ring, and the other is a receive descriptor ring, each descriptor ring may consist of up to 1024 
4-double-word consecutive descriptors. Each descriptor consists of 4 consecutive double words. The start address of each 
descriptor group should be 256-byte alignment. Software must pre-allocate enough buffers and configure all descriptor rings 


before transmitting and/or receiving packets. Descriptors can be chained to form a packet in both Tx and Rx. 


Padding: The RTL8169S/RTL8110S will automatically pad any packets less than 64 bytes (including 4 bytes CRC) to 64-byte 


long (including 4-byte CRC) before transmitting that packet onto network medium. The padded data are all 0x00. 


If a packet consists of 2 or more descriptors, then each of the descriptors in command mode should have the same 


configuration, except EOR, FS, LS bits. 


10.1.1. Transmit 


This portion implements the transmit portion of 802.3 Media Access Control. The Tx MAC retrieves packet data from the Tx 
Buffer Manager and sends it out through the transmit physical layer interface. Additionally, the Tx MAC provides MIB control 


information for transmit packets. 


The Tx MAC has the capability to insert a 4-byte VLAN tag in the transmit packet. If Tx VLAN Tag insertion is enabled, the 
MAC will insert the 4 bytes, as specified in the VTAG register, following the source and destination addresses of the packet. The 


VLAN tag insertion can be enabled on a global or per-packet basis. 
When operating in 1G mode, the RTL8169S/RTL8110S operates in full duplex mode only. 


The Tx MAC supports task offloading of IP, TCP, and UDP checksum generation. It is capable of calculating the checksums and 


inserting them into the packet. The checksum calculation can be enabled on a global or per-packet basis. 


The following information describes the structure of Tx descriptor, depending on different states in each Tx descriptor. The 


minimum Tx buffer should be at least of the size of 1 byte. 


Large-Send Task Offload Tx Descriptor Format (before transmitting, OWN=1, LGSEN=1, Tx command mode 0) 
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Table 22. Large-Send Task Offload Tx Command Descriptor 


bit 313029 28 27 26 16 15 14 13 876543210 
OJE JF |L |L | Large-Send MSS value Offset 0 
WIO |S |S |G (11 bits) Frame_Length 
N|R S 
= E 
1 N 
1 
T |R VLAN_TAG Offset 4 
RSVD A |S |VIDL PRIO |C |/VIDH 
GV FI 
C |D 
Offset 8 
TX_BUFFER_ADDRESS_LOW 
Offset 12 
TX_BUFFER_ADDRESS_HIGH 


Offset# Description 


0 Ownership: This bit, when set, indicates that the descriptor is owned by 
THE NIC, and the data relative to this descriptor is ready to be transmitted. 
When cleared, it indicates that the descriptor is owned by host system. The 
NIC clears this bit when the relative buffer data is transmitted. In this case, 


OWN=1. 


End of Descriptor Ring: This bit, when set, indicates that this is the last 
descriptor in descriptor ring. When the NIC’s internal transmit pointer 


reaches here, the pointer will return to the first descriptor of the descriptor 


ring after transmitting the data relative to this descriptor. 


First Segment Descriptor: This bit, when set, indicates that this is the first 
descriptor of a Tx packet, and that this descriptor is pointing to the first 


segment of the packet. 


Last Segment Descriptor: This bit, when set, indicates that this is the last 
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descriptor of a Tx packet, and that this descriptor is pointing to the last 


segment of the packet. 


Large Send: A command bit; TCP/IP Large send operation enable. The driver 
sets this bit to ask the NIC to offload the Large send operation. In this case, 


LGSEN=1. 


Maximum Segmentation Size: An 11-bit long command field, the driver 


passes Large-Send MSS to the NIC through this field. 


Frame_Length 


Transmit Frame Length: This field indicates the Tx frame length in TX 


buffer, in byte, to be transmitted. The maximum Large-Send frame length 


supported is 2'°-1(64KB-1). 


Reserved 


VLAN tag control bit: 1: Enable. 0: Disable. 
1: Add TAG. 0x8100 (Ethernet encoded tag protocol ID, indicating that 
this is a IEEE 802.1Q VLAN packet) is inserted after source address, and 
2 bytes are inserted after tag protocol ID from VLAN_TAG field in 
transmit descriptor. 
0: Packet remains unchanged when transmitting. Le., the packet 


transmitted is the same as it was passed down by upper layer. 


RSVD 


Reserved 


VLAN_TAG 


The 2-byte VLAN_TAG contains information, from the upper layer, of user 
priority, canonical format indication, and VLAN ID. Please refer to IEEE 
802.1Q for more VLAN tag information. 

VIDH: The high 4 bits of a 12-bit VLAN ID. 

VIDL: The low 8 bits of a 12-bit VLAN ID. 

PRIO: 3-bit 8-level priority. 


CFI: Canonical Format Indicator. 


Low 32-bit address of transmit buffer 
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Normal (including IP, TCP, UDP Checksum Task Offloads) Tx Descriptor Format (before transmitting, OWN=1, 
LGSEN=0, Tx command mode 1) 


Table 23. Normal Tx Command Descriptor 


bit 313029 28 27 26 16 15 876543210 
OJE |F JL IL JR JR JR IR JR IR IR IR IL JU Offset 0 
WIO'S |S |GIS JS JS |S |S |S |S |S |P |D |C Frame_Length 
NJ|R SV IVIV IV ]V IV IV {VIC IP IP 
= E |D|D|D|DJD|D |D|DJS |C |C 
1 N S |S 
0 
T IR VLAN_TAG Offset 4 
RSVD A|S VIDL PRIO |C} VIDH 
G|V 
C |D 
Offset 8 
TX_BUFFER_ADDRESS_LOW 
Offset 12 
TX_BUFFER_ADDRESS_HIGH 


Offset# Description 


0 Ownership: This bit, when set, indicates that the descriptor is owned by 
the NIC, and that the data relative to this descriptor is ready to be 
transmitted. When cleared, it indicates that the descriptor is owned by the 
host system. The NIC clears this bit when the relative buffer data is 


transmitted. In this case, OWN=1. 


End of descriptor Ring: This bit, when set, indicates that this is the last 
descriptor in the descriptor ring. When the NIC’s internal transmit pointer 
reaches here, the pointer will return to the first descriptor of the descriptor 


ring after transmitting the data relative to this descriptor. 


First segment descriptor: This bit, when set, indicates that this is the first 


descriptor of a Tx packet, and that this descriptor is pointing to the first 
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segment of the packet. 


Last segment descriptor: This bit, when set, indicates that this is the last 
descriptor of a Tx packet, and that this descriptor is pointing to the last 


segment of the packet. 


Large Send: A command bit; TCP/IP Large send operation enable. Driver 
sets this bit to ask NIC to offload Large send operation. In this case, 
LGSEN=0. 


Reserved 


IP checksum offload: A command bit. The driver sets this bit to ask the 


NIC to offload the IP checksum. 


UDP checksum offload: A command bit. The driver sets this bit to ask the 
NIC to offload the UDP checksum. 


TCP checksum offload enable: A command bit; The driver sets this bit to 


ask the NIC to offload the TCP checksum. 


Frame_Length 


Transmit frame length: This field indicates the length of the TX buffer, in 


bytes, to be transmitted 


Reserved 


VLAN tag control bit: 1: Enable. 0: Disable. 
1: Add TAG. 0x8100 (Ethernet encoded tag protocol ID, indicating that 
this is an IEEE 802.1Q VLAN packet) is inserted after the source address, 
and 2 bytes are inserted after tag protocol ID from the VLAN_TAG field 
in transmit descriptor. 
0: Packet remains unchanged when transmitting. Ie., the packet 


transmitted is the same as it was passed down by upper layer. 


RSVD 


Reserved 


VLAN_TAG 


VLAN Tag: The 2-byte VLAN_TAG contains information, from upper 


layer, of user priority, canonical format indicator, and VLAN ID. Please 
refer to IEEE 802.1Q for more VLAN tag information. 

VIDH: The high 4 bits of a 12-bit VLAN ID. 

VIDL: The low 8 bits of a 12-bit VLAN ID. 

PRIO: 3-bit 8-level priority. 


CFI: Canonical Format Indicator. 


TxBuffL 


Low 32-bit address of transmit buffer 


TxBuffH 
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Tx Status Descriptor (after transmitting, OWN=0, Tx status mode) 


After having transmitted, the Tx descriptor turns into a Tx status descriptor. 


Table 24. Tx Status Descriptor 


bit 313029 28 27 26 16 15 876543210 
OJE |F JL JR JR JR JR IR JR IR [R |RSVD Offset 0 
WIO JS |S |S |S |S |S |S |S |S |S RSVD 
NJR VIVIVIV IV IV IV IV 
= D |D |D |D |D |D JD |D 
0 
T IR VLAN_TAG Offset 4 
RSVD A|s VIDL PRIO |C} VIDH 
G|V FI 
C |D 
Offset 8 
TX_BUFFER_ADDRESS_LOW 
Offset 12 
TX_BUFFER_ADDRESS_HIGH 


Offset# Description 


0 Ownership: This bit, when set, indicates that the descriptor is owned by 
the NIC. When cleared, it indicates that the descriptor is owned by the host 
system. NIC clears this bit when the relative buffer data is already 


transmitted. In this case, OWN=0. 


End of Descriptor Ring: When set, indicates that this is the last descriptor 
in descriptor ring. When NIC’s internal transmit pointer reaches here, the 
pointer will return to the first descriptor of the descriptor ring after 


transmitting the data relative to this descriptor. 


First Segment Descriptor: This bit, when set, indicates that this is the first 


descriptor of a Tx packet, and that this descriptor is pointing to the first 


segment of the packet. 


Last Segment Descriptor: This bit, when set, indicates that this is the last 


descriptor of a Tx packet, and that this descriptor is pointing to the last 
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segment of the packet. 


Reserved 


Reserved 


VLAN Tag Control Bit: 1: Enable. 0: Disable. 


1: Add TAG. 0x8100 (Ethernet encoded tag protocol ID, indicating that 
this is an IEEE 802.1Q VLAN packet) is inserted after source address, 
and 2 bytes are inserted after tag protocol ID from VLAN_TAG field in 
transmit descriptor. 

0: Packet remains unchanged when transmitting. Ie., the packet 


transmitted is the same as it was passed down by the upper layer. 


RSVD Reserved 


VLAN_TAG — |VLAN Tag: The 2-byte VLAN_TAG contains information, from the upper 


layer, of user priority, canonical format indicator, and VLAN ID. Please 
refer to IEEE 802.1Q for more VLAN tag information. 

VIDH: The high 4 bits of a 12-bit VLAN ID. 

VIDL: The low 8 bits of a 12-bit VLAN ID. 

PRIO: 3-bit 8-level priority. 


CFI: Canonical Format Indicator. 


TxBuffL Low 32-bit address of transmit buffer 


TxBuffH High 32-bit address of transmit buffer 


10.1.2. Receive 
The receive portion implements the receive portion of 802.3 Media Access Control. The Rx MAC retrieves packet data from the 
receive portion and sends it to the Rx Buffer Manager. Additionally, the Rx MAC provides MIB control information and packet 


address data for the Rx Filter. 


The Rx MAC can detect packets containing a 4-byte VLAN tag, and remove the VLAN tag from the received packet. If Rx 
VLAN Tag Removal is enabled, then the 4 bytes following the source and destination addresses will be stripped out. The VLAN 


status can be returned in the VLAN Tag field. 


The Rx MAC supports IP checksum verification. It can validate IP checksums as well as TCP and UDP checksums. Packets can 


be discarded based on detecting checksum errors. 


The following information describes what the Rx descriptor may look like, depending on different states in each Rx descriptor. 
Any Rx buffer pointed to by one of the Rx descriptors should be at least 8 bytes in length, and should be 8-byte alignment in 


memory. The length of each Rx buffer should be a multiple of 8 bytes. 
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The driver should pre-allocate Rx buffers and configure Rx descriptors before packet reception. The following describes what 


Rx descriptors may look like before packet reception. 


Table 25. Rx Command Descriptor 


bit 313029 28 19 1817 16 15 14 13 12 876543210 
O\E Offset 0 
WO RSVD Buffer_Size 
N/R 
1 
T VLAN_TAG Offset 4 
RSVD A VIDL PRIO |C| VIDH 
Vv 
A 
Offset 8 
RX_BUFFER_ADDRESS_LOW 
Offset 12 
RX_BUFFER_ADDRESS_HIGH 


Offset# Description 


0 Ownership: This bit, when set, indicates that the descriptor is owned by 
the NIC, and is ready to receive a packet. The OWN bit is set by the driver 
after having pre-allocated the buffer at initialization, or the host has 


released the buffer to the driver. In this case, OWN=1. 


End of Rx descriptor Ring: This bit, set to 1 indicates that this descriptor 
is the last descriptor of the Rx descriptor ring. Once the NIC’s internal 
receive descriptor pointer reaches here, it will return to the first descriptor 


of the Rx descriptor ring after this descriptor is used by packet reception. 


RSVD Reserved 


Buffer_Size |Buffer Size: This field indicate the receive buffer size in bytes. The Rx 


buffer size should not exceed 2'%-1(8KB-1) and should be a multiple of 8. 


Le., the maximum value of this field is 0x1 FF8, and bit2-0 and bit13 should 


be always 0. 
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Reserved 


Tag Available: This bit, when set, indicates that the received packet is an 


TEEE802.1Q VLAN TAG (0x8100) available packet. 


VLAN_TAG 


VLAN Tag: If the TAG of the packet is 0x8100, The RTL8169S/RTL8110S 
extracts four bytes from after source ID, sets the TAVA bit to 1, and moves 
the TAG value of this field in Rx descriptor. 

VIDH: The high 4 bits of a 12-bit VLAN ID. 

VIDL: The low 8 bits of a 12-bit VLAN ID. 

PRIO: 3-bit 8-level priority. 


CFI: Canonical Format Indicator. 


RxBuffL 


Low 32-bit Address of Receive Buffer. 8-byte alignment is required, i.e., 
the lowest 3 LSB bits should be 0. 


Rx Status Descriptor (OWN=0) 


High 32-bit Address of Receive Buffer 


When packet is received, the Rx command descriptor turns to be a Rx status descriptor. 


Table 26. Rx Status Descriptor 


bit 313029 28 27 26 16 15 1413 12 876543210 
OJ|E |F JL |MJPAJB JR JR [R JR JR IC |PIPI}  |U |T Frame_Length Offset 0 
WIO |S |S JA |M |AJS |S E |U JR |D |D |IP|D |C 
N JR R R/VJVIT IS |N/C /1 jO |F |P |P 
= D|D T F |F 
0 
T VLAN_TAG Offset 4 
A VIDL PRIO |C| VIDH 
RSVD Vv FI 
A 
Offset 8 
RX_BUFFER_ADDRESS_LOW 
Offset 12 
RX_BUFFER_ADDRESS_HIGH 
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Offset# 


Description 


0 


Ownership: This bit, when set, indicates that the descriptor is owned by the 


NIC. When cleared, it indicates that the descriptor is owned by the host 
system. The NIC clears this bit when the NIC has filled up this Rx buffer 


with a packet or part of a packet. In this case, OWN=0. 


End of Rx Descriptor Ring: This bit, set to 1, indicates that this descriptor 
is the last descriptor of the Rx descriptor ring. Once the NIC’s internal 
receive descriptor pointer reaches here, it will return to the first descriptor 


of the Rx descriptor ring after this descriptor is used by packet reception. 


First Segment descriptor: This bit, when set, indicates that this is the first} 
descriptor of a received packet, and this descriptor is pointing to the firs 


segment of the packet. 


Last Segment Descriptor: This bit, when set, indicates that this is the last} 
descriptor of a received packet, and this descriptor is pointing to the las 


segment of the packet. 


Multicast Address Packet Received: This bit, when set, indicates that a 


multicast packet has been received. 


Physical Address Matched: This bit, when set, indicates that the 
destination address of this Rx packet matches the value in the 


RTL8169S/RTL8110S’s ID registers. 


Broadcast Address Received: This bit, when set, indicates that a broadcast 


packet has been received. BAR and MAR will not be set simultaneously. 


Reserved, always a 0. 


Reserved, always a 1. 


Receive Watchdog Timer Expired: This bit is set whenever the received 


packet length exceeds 8192 bytes. 


Receive Error Summary: This bit, when set, indicates that at least one of 
the following errors has occurred: CRC, RUNT, RWT, FAE. This bit is 


valid only when LS (Last segment bit) is set 


Runt Packet: This bit, when set, indicates that the received packet length is 
smaller than 64 bytes. RUNT packets are able to be received only when 
RCR_AR is set. 
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RCR_AER is set. 


PID1, PIDO __|Protocol ID1, Protocol IDO: These 2 bits indicate the protocol type of the 


packet received. 


PID1 PIDO 
0 0 
0 1 
1 0 
1 


IPF IP Checksum Failure: 1: Failure, 0: No failure. 


UDPF UDP Checksum Failure: |: Failure, 0: No failure. 


TCPF TCP Checksum Failure: 1: Failure, 0: No failure. 


Frame_Length |When OWN=0 and LS =1, these bits indicate the received packet length 
including CRC, in bytes. 


RSVD Reserved 


TAVA Tag Available: When set, the received packet is an IEEE802.1Q VLAN 
TAG (0x8100) available packet. 


VLAN_TAG _ |VLAN Tag: If the TAG of the packet is 0x8100, The RTL8169S/RTL8110S 
extracts four bytes from the after source ID, sets TAVA bit to 1, and moves 
the TAG value to this field in the Rx descriptor. 

VIDH: The high 4 bits of a 12-bit VLAN ID. 

VIDL: The low 8 bits of a 12-bit VLAN ID. 

PRIO: 3-bit 8-level priority. 


CFI: Canonical Format Indicator. 


Low 32-bit Address of Receive Buffer. 8-byte alignment is required. 


High 32-bit Address of Receive Buffer 


10.2. Flow Control 


The RTL8169S/RTL8110S supports IEEE802.3X flow control, based on the result of N-Way, to improve performance in 
full-duplex mode. It detects and sends PAUSE packets to achieve the flow control task. Results from the N-Way process with 


the link partner determine if flow control is supported for the current connection. 
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10.2.1. Control Frame Transmission 

When the RTL8169S/RTL8110S is running out of receive descriptors in full duplex mode, it sends a PAUSE packet (with 
pause_time=FFFFh) to inform the source station to stop transmission for the specified period of time. Once the receive 
descriptors are available again, the RTL8169S/RTL8110S sends another PAUSE packet (with pause_time=0000h) to wake up 


the source station to restart transmission. 


10.2.2. Control Frame Reception 

The RTL8169S/RTL8110S enters backoff state for the specified period of time when it receives a valid PAUSE packet (with 
pause_time=n) in full duplex mode. If the PAUSE packet is received while the RTL8169S/RTL8110S is transmitting, the 
RTL8169S/RTL8110S starts to backoff after the current transmission is completed. The RTL8169S/RTL8110S is free to 
transmit packets when it receives a valid PAUSE packet (with pause_time=0000h) or the backoff timer(=n*512 bit time) 


elapses. 


The PAUSE operation cannot be used to inhibit transmission of MAC Control frames (e.g. a PAUSE packet). The N-way flow 
control capability can be disabled. Please refer to Section 7, EEPROM (93C46 or 93C56) Contents for further information. 


10.3. Memory Functions 


10.3.1. Memory Read Line (MRL) 


The Memory Read Line command reads more than a longword (DWORD) up to the cache line boundary in a prefetchable 
address space. The Memory Read Line command is semantically identical to the Memory Read command except that it 
additionally indicates that the master intends to fetch a complete cache line. This command is intended to be used with bulk 
sequential data transfers where the memory system and the requesting master might gain some performance advantages by 
reading up to a cache line boundary in response to the request rather than a single memory cycle. As with the Memory Read 


command, pre-fetched buffers must be invalidated before any synchronization events are passed through this access path. 


The RTL8169S/RTL8110S performs MRL according to the following rules: 
i. Read accesses that reach the cache line boundary use the Memory Read Line command (MRL) instead of the Memory 
Read command. 
ii. Read accesses that do not reach the cache line boundary use the Memory Read (MR) command. 
ili. The Memory Read Line (MRL) command operates in conjunction with the Memory Read Multiple command (MRM). 
iv. The RTL8169S/RTL8110S will terminate the read transaction on the cache line boundary when it is out of resources on the 


transmit DMA. For example, when the transmit FIFO is almost full. 
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10.3.2. Memory Read Multiple (MRM) 


The Memory Read Multiple command is semantically identical to the Memory Read command except that it additionally 


indicates that the master may intend to fetch more than one cache line before disconnecting. The memory controller should 
continue pipelining memory requests as long as FRAMEB is asserted. This command is intended to be used with bulk 
sequential data transfers where the memory system and the requesting master might gain some performance advantage by 


sequentially reading ahead one or more additional cache line(s) when a software transparent buffer is available for temporary 


storage. 


The RTL8169S/RTL8110S performs MRM according to the following rules, 
i. When the RTL8169S/RTL8110S reads full cache lines, it will use the Memory Read Multiple command. 
ii. If the memory buffer is not cache-aligned, the RTL8169S/RTL8110S will use the Memory Read Line command to reach 
the cache line boundary first. 

Example: 

Assume the packet length = 1514 byte, cache line size = 16 longwords (DWORDs), and Tx buffer start address = 

64m+4 (m > 0). 
;Stepl1: Memory Read Line (MRL) 
;Data: (0-3) => (4-7) => (8-11) =>........... => (56-59) (byte offset of the Tx packet) 
sFrom Address: <64m+4>, <64m+8>, .......... , <64m+60> (reach cache line boundary) 
;Step2. Memory Read Multiple (MRM) 
;Data: (60-63) => (64-67) => (68-71) => oo. => (1454-1467) 
;From Address: <64m+64>, <64m+68>, ............ccecc eee eee , <64m+644+(16*4)*21+(16-1)*4> 
;Step3. Memory Read(MR) 
;Data: (1468-1471) => (1472-1475) => Lecce eee ees , => (1510-1513) 
;From Address:<64m+64+(16*4)*22>,<64m+64+(16*4)*22+4>,..,<64m+64+(16*4)*22+42> 
Step1: Memory Read Multiple (MRM) 
Data: (0-3) => (4-7) => (8-11) =>...........08 => (1454-1467) 
From Address: <64m+4>, <64m+8>, .......... , <64m+644(16*4)*21+(16-1)*4> 
Step2. Memory Read(MRL) 
Data: (1468-1471) => (1472-1475) => once eee eee » => (1510-1513) 
From Address:<64m+64+(16*4)*22>,<64m+64+(16*4)*22+4>,..,<64m+64+(16*4)*22+42> 


10.3.3. Memory Write and Invalidate (MWI) 
The Memory Write and Invalidate command is semantically identical to the Memory Write command except that it additionally 
guarantees a minimum transfer of one complete cache line; i.e., the master intends to write all bytes within the addressed cache 


line in a single PCI transaction unless interrupted by the target. Note: All byte enables must be asserted during each data phase for 
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this command. The master may allow the transaction to cross a cache line boundary only if it intends to transfer the entire next 


line also. This command requires implementation of a configuration register in the master indicating the cache line size and may 


only be used with Linear Burst Ordering. It allows a memory performance optimization by invalidating a "dirty" line in a 


write-back cache without requiring the actual write-back cycle, thus shortening access time. The RTL8169S/RTL81108S uses the 


MWI command while writing full cache lines, and the Memory Write command while writing partial cache lines. 


The RTL8169S/RTL8110S issues MWI command, instead of MW command on Rx DMA when the following requirements are 


met: 


iv. 


The Cache Line Size written in offset OCh of the PCI configuration space is 8 or 16 longwords (DWORDs). 
. The accessed address is cache line aligned. 

iii. The RTL8169S/RTL8110S has at least 8/16 longwords (DWORDs) of data in its Rx FIFO. 

The MWI (bit 4) in the PCI Configuration Command register should be set to 1. 


The RTL8169S/RTL8110S uses the Memory Write (MW) command instead of the MWI whenever there any one of the above 


listed requirements has failed. The RTL8169S/RTL8110S terminates the WMI cycle at the end of the cache line when a WMI 


cycle has started and at least one of the requirements are no longer held. 


Example: 
Assume Rx packet length = 1514 byte, cache line size = 16 DWORDs (longwords), and Rx buffer start address = 
64m+4 (m > 0). 


Step1: Memory Write (MW) 

Data: (0-3) => (4-7) => (8-11) => ........... => (56-59) (byte offset of the Rx packet) 
To Address: <64m+4>, <64m+8>, ..........0.. , <64m+60> (reach cache line boundary) 
Step2. Memory Write and Invalidate (MWI) 

Data: (60-63) => (64-67) => (68-71) => oo. eee ee cence eeeneeeenee => (1454-1457) 

To Address: <64m+64>, <64M+68>, ...........ce cece eeeee eee , $64m+64+(16*4)*21+(16-1)*4> 
Step3. Memory Write(MW) 

Data: (1458-1461) => (1462-1465) => ooo. => (1512-1513) 

To Address: <64m+64+(16*4)*22>, <64m+64+(16*4)*22+4>, , <64m+64+(16*4)*22+42> 


10.3.4. Dual Address Cycle (DAC) 
The Dual Address Cycle (DAC) command is used to transfer a 64-bit address to devices that support 64-bit addressing when the 


address is not in the low 4 GB address space. The RTL8169S/RTL8110S is capable of performing DAC, such that it is very 


competent as a network server card in a heavy-duty server with the possibility of allocating a memory buffer above a 4GB memory 


address space. 
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10.4. LED Functions 


The RTL8169S/RTL8110S supports 4 LED signals in 4 different configurable operation modes. The following sections describe 


the different LED actions. 


10.4.1. Link Monitor 
The Link Monitor senses the link integrity or if a station is down, such as LINK10, LINK100, LINK1000, LINK10/100/1000, 
LINK10/ACT, LINK100/ACT, or LINK1000/ACT. Whenever link status is established, the specific link LED pin is driven 


low. Once a cable is disconnected, the link LED pin is driven high indicating that no network connection exists. 


10.4.2. Rx LED 
In 10/100/1000Mbps mode, blinking of the Rx LED indicates that receive activity is occurring. 
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Figure 9. Rx LED 
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10.4.3. Tx LED 
In 10/100/1000Mbps mode, blinking of the Tx LED indicates that transmit activity is occurring. 
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Figure 10. Tx LED 
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10.4.4. Tx/Rx LED 
In 10/100/1000Mbps mode, blinking of the Tx/Rx LED indicates that both transmit and receive activity is occurring. 
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Figure 11. Tx/Rx LED 
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10.4.5. LINK/ACT LED 
In 10/100/1000Mbps mode, blinking of the LINK/ACT LED indicates that the RTL8169S/RTL81108S is linked and operating 


properly. This LED high for extended periods, indicates that a link problem exists. 
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Figure 12. LINK/ACT LED 


10.5. PHY Transceiver 


10.5.1. PHY Transmitter 

In 10Mbps mode, the Tx MAC retrieves packet data from the Tx Buffer Manager and sends it out through the transmitting 
physical layer interface. The transmit 4-bit nibbles (TXD[3:0]) clocked at 2.5Mhz (TXC), are serialized into 10Mbps serial 
data. Then, the 1OMbps serial data is converted into a Manchester-encoded data stream and is transmitted onto the media by 
the DAC converter. 

In 100Mbps mode, the transmitted 4-bit nibbles (TXD[3:0]) from the MAC, clocked at 25Mhz (TXC), are converted into 5B 
symbol code via 4B/5B coding technology, scrambling, and serializing before being converted to 125Mhz NRZ and NRZI 
signals. After that, the NRZI signal is passed to the MLT3 encoder, then to the DAC converter for transmission onto the media. 
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In 1000Mbps mode, the RTL8169S/RTL8110S’s PCS layer receives data bytes from the MAC through the GMII interface and 
performs the generation of continuous code-groups through 4D-PAMS coding technology. Then, those code groups are passed 
through waveform shaping filter to minimize EMI effect, and are transmitted onto the 4-pair CATS cable at 125MBaud/s 
through DAC converter. 


10.5.2. PHY Receiver 


In MII (10Mbps) mode, the received differential signal is converted into a Manchester-encoded data stream. The stream is 
processed with a Manchester decoder, and is de-serialized into 4-bit wide nibbles. The 4-bit nibbles are presented to the MII 
interface at a clock speed of 2.5MHz. In 100Mbps mode, the MLT3 signal is processed with an ADC, equalizer, BLW 
(Baseline Wander) correction, timing recovery, MLT3 and NRZI decoder, descrambler, 4B/5B decoder, and then is presented 
to the MII interface in 4-bit wide nibbles at a clock speed of 25MHz. 


In GMII mode, the input signal from the media first passes through the on-chip sophisticated hybrid circuit to subtract the 
transmitted signal from the input signal for effective reduction of near-end echo. Afterwards, the received signal is processed 
with adaptive equalization, BLW (Baseline Wander) correction, cross-talk cancellation, echo cancellation, timing recovery, 
error correction, and 4D-PAMS5 decoding. Then, the 8-bit wide data is recovered and is sent to the GMII interface at a clock 
speed of 125MHz. The Rx MAC retrieves the packet data from the receive MII/GMII interface and sends it to the Rx Buffer 
Manager. 


10.6. Next Page 


If 1000Base-T mode is advertised, three additional Next Pages are automatically exchanged between the two link partners. 
Users can set Reg4.15 to 1 to exchange extra Next Pages via Reg7 and Reg8 as defined in IEEE 802.3ab. 


10.7. EEPROM Interface 


The RTL8169S/RTL8110S requires the attachment of an external EEPROM. The 93C46 is a 1K-bit EEPROM (the 93CS6 is a 
2K-bit EEPROM). The EEPROM interface provides the ability for the RTL8169S/RTL8110S to read from and write data to an 
external serial EEPROM device. 

Values in the external EEPROM allow default fields in PCI configuration space and I/O space to be overridden following a 
power-on or software EEPROM auto load command. The RTL8169S/RTL8110S will auto-load values from the EEPROM. If 
the EEPROM is not present, the RTL8169S/RTL8110S initialization uses default values for the appropriate Configuration and 
Operational Registers. Software can read and write to the EEPROM using “bit-bang” accesses via the 9346CR Register, or 
using PCI VPD. The interface consists of EESK, EECS, EEDO, and EEDI. 


Table 27. EEPROM Interface 


EEPROM Description 

EECS 93C46 (93C56) chip select 

EESK EEPROM serial data clock 

EEDI/Aux Input data bus/Input pin to detect if Aux. Power exists or not on initial power-on. 


This pin should be connected to Boot PROM. To support wakeup from ACPI 
D3cold or APM power-down, this pin must be pulled high to aux. power via a 
resistor. If this pin is not pulled high to Aux. Power, the RTL8169S/RTL8110S 
assumes that no Aux. Power exists. 


EEDO Output data bus 


Integrated Gigabit Ethernet Controller 85 Rey. 1.3 


RTL8169S-32/RTL8169S-64 


Ah R EA LT E K RTL8110S-32/RTL8110S-64 


Datasheet 


11. Characteristics 


11.1, Absolute Maximum Ratings 


WARNING: Absolute maximum ratings are limits beyond which permanent damage may be caused to the device, or device 


reliability will be affected. All voltages are specified reference to GND unless otherwise specified. 


Table 28. Absolute Maximum Ratings 


Description/Symbol Minimum Maximum Unit 
Supply Voltage (VDD33, AVDDH) -0.5 4 Vv 
Supply Voltage (VDD25) -0.5 3 Vv 
Supply Voltage (VDD 18) -0.5 2 Vv 
Input Voltage (DCinput) -0.5 VDD33 + 0.5 Vv 
Output Voltage (DCoutput) -0.5 VDD33 + 0.5 Vv 
Storage Temperature -55 +125 °C 
11.2. Recommended Operating Conditions 
Table 29. Recommended Operating Conditions 
Description Pins Minimum Typical Maximum Unit 
Supply Voltage VDD VDD33, 3.0 3.3 3.6 Vv 
AVDDH 
VDD25 2.325 2.5 2.675 Vv 
VDD18 1.674 1.8 1.926 Vv 
Ambient Temperature T, 0 70 °C 
Maximum Junction 125 °C 
Temperature 
11.3. Crystal Requirements 
Table 30. Crystal Requirements 
Symbol Description/Condition Minimum | Typical | Maximum | Unit 
Free Parallel resonant crystal reference frequency, 25 MH 
fundamental mode, AT-cut type. Z 
F,e¢ Stability Parallel resonant crystal frequency stability, -50 ppm 
fundamental mode, AT-cut type. T,=25°C. 
Fret Parallel resonant crystal frequency tolerance, -30 ppm 
Tolerance fundamental mode, AT-cut type. 
T,=-20°'C~+70°C. 
Fret Reference clock input duty cycle 40 % 
Duty Cycle 
Cc. Load Capacitance pF 
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Symbol Description/Condition Minimum | Typical | Maximum | Unit 
ESR Equivalent Series Resistance Q 
DL Drive Level 0.5 mW 
11.4. Thermal Characteristics 
Table 31. Thermal Characteristics 
Parameter Minimum Maximum Units 
Storage temperature -55 +125 °C 
Operating temperature 0 70 °C 
11.5. DC Characteristics 
Table 32. DC Characteristics 
Symbol Parameter Conditions Minimum Typical Maximum Units 
voDss || 2° ery 3.0 3.3 3.6 Vv 
Voltage 
vppig_| 1-8V Supply 7a 1.8 1.98 V 
Voltage 
VDD25 2.5V Supply 2.25 2.5 2.75 Vv 
Voltage 
Minimum High 
Voh Level Output Ioh = -8mA 0.9 * Vcc Vcc Vv 
Voltage 
Maximum Low 
Vol Level Output Io] = 8mA 0.1 * Vec Vv 
Voltage 
Minimum High 
V; * 
ih Level Input Voltage Dare Ves ica mt 
Vit Maximum Low 0.5 0.3*V Vv 
; Level Input Voltage nas ; ii 
Vin =Vcc or 
Tin Input Current -1.0 1.0 uA 
GND 
I Tri-State Output Vout =Vee or 
OZ -10 10 uA 
Leakage Current GND 
Average Operating 
Icc33 Supply Current mA 
from 3.3V 
Average Operating 
Ioe18 Supply Current mA 
from 1.8V 
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11.6. AC Characteristics 


11.6.1. Serial EEPROM Interface Timing 
93C46(64* 16)/93C56(128*16) 
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Figure 13. Serial EEPROM Interface Timing 
Table 33. EEPROM Access Timing Parameters 
Symbol Parameter EEPROM Type Min. Max. Unit 
tcs Minimum CS Low Time 9346/9356 1000/250 ns 
twp Write Cycle Time 9346/9356 10/10 ms 
tsk SK Clock Cycle Time 9346/9356 4/1 us 
tskh SK High Time 9346/9356 1000/500 ns 
tskl SK Low Time 9346/9356 1000/250 ns 
tess CS Setup Time 9346/9356 200/50 ns 
tcsh CS Hold Time 9346/9356 0/0 ns 
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Symbol Parameter EEPROM Type Min. Max. Unit 
tdis DI Setup Time 9346/9356 400/50 ns 
tdih DI Hold Time 9346/9356 400/100 ns 
tdos DO Setup Time 9346/9356 2000/500 ns 
tdoh DO Hold Time 9346/9356 2000/500 ns 
tsv CS to Status Valid 9346/9356 1000/500 ns 
11.7, PCI Bus Operation Timing 
11.7.1. PCI Bus Timing Parameters 
Table 34. PCI Bus Timing Parameters 
66MHz 33MHz 
Symbol Parameter Min Max Min Symbol Parameter 
T val CLK to Signal Valid 2 6 2 11 ns 
Delay-bused signals 
T CLK to Signal Valid 2 6 2 12 ns 
val(ptp) Delay-point to point 
Ton Float to Active Delay 2 2 ns 
T off Active to Float Delay 14 28 ns 
Tsu Input Setup Time to 3 7 ns 
CLK-bused signals 
T su(ptp) Input Setup Time to py) 10 ns 
CLK-point to point 
Th Input Hold Time from 0 0 ns 
CLK 
T rst Reset active time after 1 1 ms 
power stable 
T rst-clk Reset active time after 100 100 us 
CLK STABLE 
T rst-off Reset Active to Output 40 40 ns 
Float delay 
Trrsu REQB to REQ64B 10*Tcyc 10*Tcyc ns 
Setup Time 
Trrh RSTB to REQ64B 0 50 0 50 ns 
Hold Time 
T rhfa RSTB High to First 225 2425 clocks 
configuration Access 
T rhff RSTB High to First 5 =) clocks 
FRAMEB assertion 
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Figure 14. Output Timing Measurement Conditions 
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Figure 15. Input Timing Measurement Conditions 


Table 35. Measurement Condition Parameters 


Symbol Level Units 
Vth 0.6Vcc Vv 
Vif 0.2Vcc Vv 
Vtest 0.4Vcc Vv 
Vtrise 0.285 Vcc Vv 
Vtfall 0.615 Vcc Vv 
Vmax 0.4Vcc Vv 
Input Signal Edge Rate 1 V/ns 
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11.7.2. PCI Clock Specification 
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Figure 17. Clock Skew Diagram 


Table 36. Clock and Reset Specifications 


66MHz 33M Hz 
Symbol Parameter Min Max Min Symbol Parameter 
Tcyc CLK Cycle Time 15 30 30 00 ns 
Thigh CLK High Time 6 11 ns 
Tlow CLK Low Time 6 11 ns 
-- CLK Slew Rate 1.5 4 1 4 V/ns 
-- RST# Slew Rate 50 - 50 - mV/ns 
Tskew CLK Skew 1 2, ns 
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11.7.3. PCI Transactions 
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Figure 19. I/O Write 
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Figure 20. Configuration Read 
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Figure 21. Configuration Write 
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Figure 23. Memory Read below 4GB (32-bit address, 32-bit data; 32-bit slot) 
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Figure 24. Memory Write below 4GB (32-bit address, 32-bit data; 32-bit slot) 
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Figure 25. Target Initiated Termination - Disconnect 
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Figure 26. Target Initiated Termination - Abort 
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Figure 27. Master Initiated Termination - Abort 
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Figure 28. Parity Operation - One Example 
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Figure 29. Memory Read Below 4GB (32-bit address, 32-bit data transfer granted; 64-bit slot) 
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Figure 30. Memory Write below 4GB (32-bit address, 32-bit data transfer granted; 64-bit slot) 
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Figure 31. Memory Read below 4GB (32-bit address, 64-bit data transfer granted; 64-bit slot) 
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Figure 32. Memory Write below 4GB (32-bit address, 64-bit data transfer granted; 64-bit slot) 
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Figure 33. Memory Read above 4GB (DAC, 64-bit address, 32-bit data; 32-bit slot) 
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Figure 34. Memory Write above 4GB (DAC, 64-bit address, 32-bit data; 32-bit slot) 
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Figure 35. Memory Read above 4GB (DAC, 64-bit address, 32-bit data transfer granted; 64-bit slot) 
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Figure 36. Memory Write above 4GB (DAC, 64-bit address, 32-bit data transfer granted; 64-bit slot) 
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Figure 37. Memory Read above 4GB (DAC, 64-bit address, 64-bit data transfer granted; 64-bit slot) 
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Figure 38. Memory Write above 4GB (DAC, 64-bit address, 64-bit data transfer granted; 64-bit slot) 
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12. Mechanical Dimensions 


12.1, 128-Pin QF P Mechanical Dimensions 
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See the Mechanical Dimensions notes on the next page. 
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12.2. Notes for 128-Pin QF P Dimensions 


Dimensions in inches Dimensions in mm 


Max Typical 


0.004 | 0.010 | 0.036 | 0.10 


0.102 | 0.112 | 0.122 | 2.60 
0.002 | 0.006 | 0.010 | 0.05 | 0.15 | 0.25 
[se 1) OOoe | ame: eae | 
| D 0.541 | 0.551 | 0.561 | 13.75 | 14.00 | 14.25 
0.778 | 0.787 | 0.797 | 19.75 | 20.00 | 20.25 
he Oey ee ee 


Symbol 
| Min [Typical] Max | Min | 


[ie [mo oem [oom fas [os [as 


HE | 0.902 | 0.913 22.90 | 23.20 | 23.50 
L_ | 0.027 | 0.035 0.68 | 0.88 | 1.08 


Notes: 
1. Dimensions D & E do not include interlead flash. 


2. Dimension b does not include dambar 
rotrusion/intrusion. 


3. Controlling dimension: Millimeter 


Should be based on final 
visual inspection. 


4. General appearance spec. 


TITLE: 
-CU L/F, FOOTPRINT 3.2 mm 
LEADFRAME MATERIAL: 


VERSION 
PAGE 


DWG NO. Q128 - 1 


y 0.004 - 0.10 
0 12° 0° 12° 
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12.3. 233-PIN TFBGA Mechanical Dimensions 


SEATING PLANE 
{NOTE 2) 


DETAIL: A 


~ 
ON, a] 
6 as 


See the Mechanical Dimensions notes on the next page. 
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12.4. Notes for 233-Pin TFBGA Dimensions 


Symbol [win | Nom [MAX _| 

A |---| === | 1.30 | _ == | 

Al 0.010 0.014 
0.033 0.037 
0.013 0.016 
0.587 0.594 
}14.90 | 15.00 | 15.10 _| | 

| --- | 12.80 | --- | 

| --- | 12.80 | --- | 

| --- | o80 | --- | 

014 0.018 

0.004 

0.004 

0.005 

0.006 

fff 0.003 

MD/ME 7/17 


NOTE : 
1. CONTROLLING DIMENSION : MILLIMETER. 


2. PRIMARY DATUM C AND SEATING PLANE ARE 
DEFINED BY THE SPHERICAL CROWNS OF 
THE SOLDER BALLS. 


3. DIMENSION b IS MEASURED AT THE MAXIMUM 
SOLDER BALL DIAMETER, PARALLEL TO 
PRIMARY DATUM C. 

4. THERE SHALL BE A MINIMUM CLEARANCE OF 


0.25mm BETWEEN THE EDGE OF THE 
SOLDER BALL AND THE BODY EDGE. 


3. REFERANCE DOCUMENT : JEDEC MO—205 
6. THE PATTERN OF PIN 1 FIDUCIAL IS FOR 
REFERENCE ONLY. 


0.587 0.594 


—_ 


| A 
| At 
Le 
| a | 
| 
| aaa _| 
bbb | 
| ddd _| 
| ece_| 
Lae _| 
MD /NE | 
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13. Ordering Information 


Table 37. Ordering Information 


Part number Package Status 
RTL8169S-32 128-pin QFP 

RTL8169S-64 233-pin TFBGA 

RTL8110S-32 128-pin QFP 

RTL8110S-64 233-pin TFBGA 
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Appendix A. Driver programming note 


A-1 MAC registers configuration sequence 


The “C+ Command” and “Command” registers are the key parameters before any other registers or 
descriptors are configured. It is necessary to configure the MAC registers as following Steps: 

Stepl. Configure C+ Command Register (Offset OOEOh-O0E Ih) 

Step2. Configure Command Register (Offset 0037h) 

Step3. Configure Other Registers 


A-2 Multicast Registers configuration 


The way to configure the MAR registers is the same with the NE2000 driver. 


A-3 Checksum offload Tx Descriptor note 


To transmit an Ethernet packet, the upper layer might split this packet to several transmit buffers. Each 
transmit buffer corresponds to a Tx descriptor. If it transmits a packet with the Checksum Task Offload, it 


is necessary to set the related checksum offload bits of all Tx descriptors with this packet. 


A-4 GMIl registers configuration sequence during driver 


initialization 


Configure the GMII registers as below during driver initialization: 
OutPortUlong(offset0x60, 0x801f0001); 
OutPortUlong(offset0x60, 0x8015 1000); 
OutPortUlong(offset0x60, 0x801865c7); 
OutPortUlong(offset0x60, 0x80040000); 
OutPortUlong(offset0x60, 0x800300a1); 
OutPortUlong(offset0x60, 0x80020008); 
OutPortUlong(offset0x60, 0x8001 1020); 
OutPortUlong(offset0x60, 0x80001000); 
OutPortUlong(offset0x60, 0x80040800); 
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10. OutPortUlong(offset0x60, 0x80040000); 
11. OutPortUlong(offset0x60, 0x80047000); 
12. OutPortUlong(offset0x60, 0x8003ff41); 

13. OutPortUlong(offset0x60, 0x8002de60); 
14. OutPortUlong(offset0x60, 0x80010140); 
15. OutPortUlong(offset0x60, 0x80000077); 
16 OutPortUlong(offset0x60, 0x80047800); 
17. OutPortUlong(offset0x60, 0x80047000); 
18. OutPortUlong(offset0x60, 0x8004a000); 
19. OutPortUlong(offset0x60, 0x8003df01); 
20. OutPortUlong(offset0x60, 0x8002df20); 
21. OutPortUlong(offset0x60, 0x8001ff95); 

22. OutPortUlong(offset0x60, 0x8000fa00); 
23. OutPortUlong(offset0x60, 0x8004a800); 
24. OutPortUlong(offset0x60, 0x8004a000); 
25. OutPortUlong(offset0x60, 0x8004b000); 
26. OutPortUlong(offset0x60, 0x8003ff41); 

27. OutPortUlong(offset0x60, 0x8002de20); 
28. OutPortUlong(offset0x60, 0x80010140); 
29. OutPortUlong(offset0x60, Ox800000bb); 
30. OutPortUlong(offset0x60, 0x8004b800); 
31. OutPortUlong(offset0x60, 0x8004b000); 
32. OutPortUlong(offset0x60, 0x8004f000); 
33. OutPortUlong(offset0x60, 0x8003df01); 
34. OutPortUlong(offset0x60, 0x8002df20); 
35. OutPortUlong(offset0x60, 0x8001ff95); 

36. OutPortUlong(offset0x60, Ox8000bf00); 
37. OutPortUlong(offset0x60, 0x8004f800); 
38. OutPortUlong(offset0x60, 0x8004f000); 
39. OutPortUlong(offset0x60, 0x80040000); 
40. OutPortUlong(offset0x60, 0x801f0000); 
41. OutPortUlong(offset0x60, 0x800b0000); 
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